IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 153628.
https://www.ibm.com/support/docview.wss?uid=ibm10794615
https://exchange.xforce.ibmcloud.com/vulnerabilities/153628