PT-2021-13953
CVE-2021-20418
·
Published
2021-08-11
·
Updated
2021-08-19
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
IBM Security Guardium version 11.2
Description:
The issue is related to the default password requirements. By default, strong passwords are not required, making it easier for attackers to compromise user accounts.
Recommendations:
For IBM Security Guardium version 11.2, consider configuring the system to require strong passwords for all users as a mitigation measure. Additionally, review and update the password policy to enforce stronger passwords and minimize the risk of account compromise.
Found an issue in the description? Have something to add? Feel free to write us 👾