CVE-2018-1680: High severity ibm security privileged identity manager virtual appliance vulnerability

Published Apr 2, 2019

Updated

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.

Affected Software

1 affected component

IBM Security Privileged Identity Manager=2.1.1

Event History

Apr 2, 2019

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1680?

CVE-2018-1680 has a medium severity rating due to the potential for unauthorized account access.

How do I fix CVE-2018-1680?

To fix CVE-2018-1680, implement strong password policies for user accounts in IBM Security Privileged Identity Manager.

Who is affected by CVE-2018-1680?

CVE-2018-1680 affects users of IBM Security Privileged Identity Manager Virtual Appliance version 2.2.1 and earlier.

What is the impact of CVE-2018-1680?

The impact of CVE-2018-1680 is an increased risk of account compromise due to weak password requirements.

Is there a patch available for CVE-2018-1680?

IBM has provided guidance to address CVE-2018-1680, but users should check the latest documentation for specific patch details.