Security Bulletin: IBM Security Guardium is affected by a Weak Password Policy vulnerability (CVE-2021-20418)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2021-20418 DESCRIPTION: IBM Security Guardium does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. CVSS Base score: 4.7 CVSS...

CVE-2021-20418

IBM Security Guardium CVE-2021-20418 stems from a default weak password policy that does not require strong credentials, enabling potential account compromises. Public documentation covers affected releases up to 11.3 (and earlier 10.5–11.3) and states fixes are available in the upgraded bundles ...