Security Bulletin: Weakness in generated service credentials affects multiple Watson Developer Cloud services (CVE-2016-0391)

Summary A weakness in generated service credentials that affects multiple Watson Developer Cloud offered through IBM Bluemix has been identified and fixed. Replacement of previously generated credentials is recommended. Vulnerability Details CVEID: CVE-2016-0391 DESCRIPTION: Multiple Watson...

IBM Watson Developer Cloud Weak Password Vulnerability

IBM Watson is a set of technology platforms from the American company IBM, and an outstanding representative of cognitive computing a new computing paradigm that encompasses a large number of technological innovations in the fields of information analytics, natural language processing and machine...

Design/Logic Flaw

The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

CVE-2016-0391: Improper Access Control

The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack...

PT-2016-4180

Name of the Vulnerable Software and Affected Versions IBM Watson Developer Cloud services on Bluemix platforms affected versions not specified Description The issue concerns the improper generation of random numbers for service-instance credentials in the IBM Watson Developer Cloud services on...