VulnerabilityModified
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
MEDIUM 5.9EPSS 1.33%
Does this matter?
Lower severity and a low EPSS score (1.33%). Track it; it rarely justifies an emergency change on its own.
Description
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851.
- CVSS 3.0
- 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.33% probability · 69th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- ibm/bigfix inventory
- Source
- psirt@us.ibm.com
References
- http://www.ibm.com/support/docview.wss?uid=swg21995031Vendor Advisory
- http://www.securityfocus.com/bid/98030Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038360
- http://www.ibm.com/support/docview.wss?uid=swg21995031Vendor Advisory
- http://www.securityfocus.com/bid/98030Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038360
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.