Security Bulletin: IBM Maximo Asset Management is vulnerable to weak password requirements (CVE-2021-38935)

Summary IBM Maximo Asset Management does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. Vulnerability Details CVEID: CVE-2021-38935 DESCRIPTION: IBM Maximo Asset Management does not require that users should have...

CVE-2021-38935

IBM Maximo Asset Management core product (7.6.1.2 and 7.6.1.1) is vulnerable due to default weak password requirements, enabling easier account compromise. Root cause: absence of strong password enforcement by default. Impact: attacker access to user accounts. Remediation: apply the appropriate F...