CVE-2017-1221

Critical

Published: 13/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require strong passwords by default, making it easier for attackers to compromise user accounts.

Risk Assessment

The lack of strong password requirements increases the risk of unauthorized access to user accounts, potentially leading to serious security breaches.

Recommendation

It is recommended to configure strong password requirements for users in IBM Tivoli Endpoint Manager to enhance account security.

Original NVD description (English source)

IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.