PT-2023-13361 · Ibm · Ibm Sterling Order Management

Publicado 2023-04-07 · Atualizado 2023-04-13 · CVE-2022-34333

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling Order Management version 10.0

Description The issue is related to the default password strength requirements. By default, strong passwords are not required, making it easier for attackers to compromise user accounts.

Recommendations For IBM Sterling Order Management version 10.0, consider enforcing strong password policies to mitigate the risk of account compromise. As a temporary workaround, review and update the default password settings to require stronger passwords for all users.

Correção

Enumeração de Fraquezas

CWE-521

Identificadores relacionados

CVE-2022-34333

Produtos afetados

Ibm Sterling Order Management

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/229698 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-34333 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-34333 · Aviso do Fabricante
• https://ibm.com/support/pages/node/6981917 · Aviso do Fabricante
• https://t.me/cibsecurity/61656 · Publicação no Telegram