CVE-2017-1601 Weak cryptography in n/a

What is CVE-2017-1601?

CVE-2017-1601 is a critical vulnerability in n/a, published on 2 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132624.

Weakness: CWE-521

Which versions are affected by CVE-2017-1601?

It affects 1 product.

Products include Ibm Security Guardium Database Activity Monitor.

How do I fix CVE-2017-1601?

No fix has been published for CVE-2017-1601 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-1601 being exploited?

There is no known exploitation of CVE-2017-1601 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2016-0239 Privilege escalation in n/a High 8.8
• CVE-2016-0241 Auth bypass in n/a High 8.8
• CVE-2016-0236 Command injection in n/a High 8.8
• CVE-2016-0235 Hardcoded credentials in n/a High 8.2
• CVE-2016-0328 Privilege escalation in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gm6q-qv7q-5ggv.