CVE-2017-1221: Critical severity hcltech bigfix platform vulnerability
Published Nov 13, 2017
·Updated
IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.
Affected Software
2 affected components
IBM BigFix Platform=9.2
IBM BigFix Platform=9.5
Event History
Nov 13, 2017
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1221?
CVE-2017-1221 is considered a medium severity vulnerability due to the potential for account compromise.
2
How do I fix CVE-2017-1221?
To fix CVE-2017-1221, enforce strong password policies and update your IBM Tivoli Endpoint Manager settings.
3
Which versions are affected by CVE-2017-1221?
CVE-2017-1221 affects IBM BigFix versions 9.2 and 9.5.
4
What issue does CVE-2017-1221 present?
CVE-2017-1221 presents an issue where strong passwords are not required by default, risking account security.
5
Is there a workaround for CVE-2017-1221?
A workaround for CVE-2017-1221 is to manually enforce strong password requirements for user accounts in the management console.