CVE-2016-0391
CriticalSummary
The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, making it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Risk Assessment
The organization may be exposed to attacks that could lead to credential compromise and access to sensitive data.
Recommendation
It is recommended to update the services to the latest version that improves random number generation and to implement additional security mechanisms.
Original NVD description (English source)
The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.