CVE-2019-4321
First published: Thu Sep 05 2019(Updated: )
IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 161201.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Intelligent Operations Center | >=5.1.0<=5.2.0 | |
| IBM Intelligent Operations Center for Emergency Management | >=5.1.0<=5.1.0.6 | |
| IBM Water Operations for Waternamics | >=5.1.0<=5.2.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-4321?
The severity of CVE-2019-4321 is high with a severity value of 7.5.
Which IBM products are affected by CVE-2019-4321?
IBM Intelligent Operations Center versions 5.1.0 - 5.2.0, IBM Intelligent Operations Center for Emergency Management versions 5.1.0 - 5.1.0.6, and IBM Water Operations for Waternamics versions 5.1.0 - 5.2.1.1 are affected by CVE-2019-4321.
Does CVE-2019-4321 require strong passwords by default?
No, IBM Intelligent Operations Center versions 5.1.0 - 5.2.0, IBM Intelligent Operations Center for Emergency Management versions 5.1.0 - 5.1.0.6, and IBM Water Operations for Waternamics versions 5.1.0 - 5.2.1.1 do not require strong passwords by default.
How can attackers exploit CVE-2019-4321?
Attackers can exploit CVE-2019-4321 by bypassing the weak password requirement, making it easier for them to compromise the system.
Where can I find more information about CVE-2019-4321?
You can find more information about CVE-2019-4321 on the IBM Support website at http://www.ibm.com/support/docview.wss?uid=ibm10885901 and on the IBM X-Force Exchange website at https://exchange.xforce.ibmcloud.com/vulnerabilities/161201.
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm intelligent operations center
- version/ibm intelligent operations center/5.1.0
- version/ibm intelligent operations center/5.2.0
- canonical/ibm intelligent operations center for emergency management
- version/ibm intelligent operations center for emergency management/5.1.0
- version/ibm intelligent operations center for emergency management/5.1.0.6
- canonical/ibm water operations for waternamics
- version/ibm water operations for waternamics/5.1.0
- version/ibm water operations for waternamics/5.2.1.1