CVE-2017-1196

Critical

Published: 07/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM BigFix Compliance version 1.9.70 does not require strong passwords by default, making it easier for attackers to compromise user accounts.

Risk Assessment

The lack of strong password requirements increases the risk of user account takeover, potentially leading to unauthorized access to sensitive data.

Recommendation

It is recommended to configure the system to enforce strong password usage for all users.

Original NVD description (English source)

IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123671.