CVE-2018-1680

high

Description

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/145236

http://www.ibm.com/support/docview.wss?uid=ibm10879093

Details

Source: Mitre, NVD

Published: 2019-04-02

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00245

Detections

Analytics