PT-2017-9901 · Ibm · Ibm Bigfix Inventory

Published 2017-04-26 · Updated 2017-07-11 · CVE-2016-8962

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM BigFix Inventory version 9.2

Description The issue makes it easier for attackers to compromise user accounts due to a lack of strong password requirements by default.

Recommendations For IBM BigFix Inventory version 9.2, consider enforcing strong password policies to mitigate the risk of user account compromise.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2016-8962

Affected Products

Ibm Bigfix Inventory

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-8962 · Security Note
• http://ibm.com/support/docview.wss?uid=swg21995031 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-8962 · Vendor Advisory
• http://securityfocus.com/bid/98030 · Note
• http://securitytracker.com/id/1038360 · Note