CVE-2024-40697: IBM Common Licensing information disclosure
IBM Common Licensing 9.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 297895.
Other sources
IBM Common Licensing does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40697?
CVE-2024-40697 has a moderate severity level due to its potential for account compromise via weak password policies.
How do I fix CVE-2024-40697?
To mitigate CVE-2024-40697, you should enforce strong password policies for users in IBM Common Licensing.
What versions of IBM Common Licensing are affected by CVE-2024-40697?
CVE-2024-40697 affects IBM Common Licensing version 9.0 including Agent 9.0 and ART 9.0.
Can CVE-2024-40697 be exploited remotely?
Yes, CVE-2024-40697 can be exploited remotely if weak passwords are in use, making user accounts vulnerable.
What measures can I take to prevent CVE-2024-40697?
To prevent CVE-2024-40697, implement multi-factor authentication alongside strong password requirements for all user accounts.