Security Bulletin: Weakness in generated service credentials affects multiple Watson Developer Cloud services (CVE-2016-0391)

Summary A weakness in generated service credentials that affects multiple Watson Developer Cloud offered through IBM Bluemix has been identified and fixed. Replacement of previously generated credentials is recommended. Vulnerability Details CVEID: CVE-2016-0391 DESCRIPTION: Multiple Watson...

IBM Watson Developer Cloud Weak Password Vulnerability

IBM Watson is a set of technology platforms from the American company IBM, and an outstanding representative of cognitive computing a new computing paradigm that encompasses a large number of technological innovations in the fields of information analytics, natural language processing and machine...

CVE-2016-0391: Improper Access Control

The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...