{"id":"CVE-2017-1411","state":"PUBLISHED","title":"IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to c","description":"IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399.","publishedAt":"2018-08-06T14:00:00.000Z","updatedAt":"2024-09-17T01:25:32.529Z","severity":{"score":5.9,"label":"Medium","version":"3.0","vector":"CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Security Identity Governance and Intelligence"],"affected":[{"vendor":"IBM","product":"Security Identity Governance and Intelligence","versions":[{"version":"5.2","status":"affected"},{"version":"5.2.1","status":"affected"},{"version":"5.2.2","status":"affected"},{"version":"5.2.2.1","status":"affected"},{"version":"5.2.3","status":"affected"},{"version":"5.2.3.1","status":"affected"},{"version":"5.2.3.2","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/127399","http://www.ibm.com/support/docview.wss?uid=swg22016869"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:33.892Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/1xxx/CVE-2017-1411.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-1411","state":"PUBLISHED","datePublished":"2018-08-06T14:00:00.000Z","dateUpdated":"2024-09-17T01:25:32.529Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2016-11-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399."}],"affected":[{"vendor":"IBM","product":"Security Identity Governance and Intelligence","versions":[{"version":"5.2","status":"affected"},{"version":"5.2.1","status":"affected"},{"version":"5.2.2","status":"affected"},{"version":"5.2.2.1","status":"affected"},{"version":"5.2.3","status":"affected"},{"version":"5.2.3.1","status":"affected"},{"version":"5.2.3.2","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/127399","name":"ibm-sig-cve20171411-info-disc(127399)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22016869","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":5.2,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2018-08-06T13:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2018-08-01T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2018-08-01T00:00:00","ID":"CVE-2017-1411","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Identity Governance and Intelligence","version":{"version_data":[{"version_value":"5.2"},{"version_value":"5.2.1"},{"version_value":"5.2.2"},{"version_value":"5.2.2.1"},{"version_value":"5.2.3"},{"version_value":"5.2.3.1"},{"version_value":"5.2.3.2"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 127399."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"N","C":"H","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"ibm-sig-cve20171411-info-disc(127399)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/127399"},{"name":"http://www.ibm.com/support/docview.wss?uid=swg22016869","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg22016869"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/127399","name":"ibm-sig-cve20171411-info-disc(127399)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22016869","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T13:32:29.854Z"}}]}}}