Vulnerability Description
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Guardium | >= 10.0, <= 10.5 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106236Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/132610VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=swg22014231Vendor Advisory
- http://www.securityfocus.com/bid/106236Third Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/132610VDB EntryVendor Advisory
- https://www.ibm.com/support/docview.wss?uid=swg22014231Vendor Advisory
FAQ
What is CVE-2017-1597?
CVE-2017-1597 is a vulnerability with a CVSS score of 5.9 (MEDIUM). IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for atta...
How severe is CVE-2017-1597?
CVE-2017-1597 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-1597?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Guardium.