5.9
Medium
CVE-2018-1680 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong…
Description
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Privileged Identity Manager | 2.1.1 | No fix stated |
Other CVEs of Security Privileged Identity Manager
The 10 CVEs of Security Privileged Identity Manager →
CVE-2018-1618
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories…
7.7
High
CVE-2018-1622
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could…
4.3
Medium
CVE-2018-1623
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read…
4.0
Medium
CVE-2018-1625
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive…
4.3
Medium