CVE-2017-1411
Last modified
CVE-2017-1411 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399.. EPSS estimates a 1.48% chance of exploitation in the next 30 days.
Description
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399.
Metrics
CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Identity Governance And Intelligence | 5.2 |
| Ibm | Security Identity Governance And Intelligence | 5.2.1 |
| Ibm | Security Identity Governance And Intelligence | 5.2.2 |
| Ibm | Security Identity Governance And Intelligence | 5.2.2.1 |
| Ibm | Security Identity Governance And Intelligence | 5.2.3 |
| Ibm | Security Identity Governance And Intelligence | 5.2.3.1 |
| Ibm | Security Identity Governance And Intelligence | 5.2.3.2 |
References
- http://www.ibm.com/support/docview.wss?uid=swg22016869Patch, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22016869Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-1411?
How severe is CVE-2017-1411?
How do I fix CVE-2017-1411?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-14102MIMEDefang 2.80 and earlier creates a PID file after droppin…
- CVE-2017-14103The ReadJNGImage and ReadOneJNGImage functions in coders/png…
- CVE-2017-14105HiveManager Classic through 8.1r1 allows arbitrary JSP code …
- CVE-2017-14106The tcp_disconnect function in net/ipv4/tcp.c in the Linux k…
- CVE-2017-14107The _zip_read_eocd64 function in zip_open.c in libzip before…6.5
- CVE-2017-14108libgedit.a in GNOME gedit through 3.22.1 allows remote attac…
- CVE-2017-14111The workstation logging function in Philips IntelliSpace Car…
- CVE-2017-14113Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-14114RTPproxy through 2.2.alpha.20160822 has a NAT feature that r…
- CVE-2017-14115The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
- CVE-2017-14116The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 de…
- CVE-2017-14117The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 an…
Are you affected by CVE-2017-1411?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST