IBM Security Bulletin: Password vulnerability in IBM® Intelligent Operations Center (CVE-2019-4321)

IBM® Intelligent Operations Center does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

CVE(s): CVE-2019-4321

Affected product(s) and affected version(s):
This vulnerability affects the following products and versions:

• IBM® Intelligent Operations Center V5.1.0 – V5.2.0
• IBM® Intelligent Operations Center for Emergency Management V5.1.0 – V5.1.0.6
• IBM® Water Operations for Waternamics V5.1.0 – V5.2.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10885901
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/161201

The post IBM Security Bulletin: Password vulnerability in IBM® Intelligent Operations Center (CVE-2019-4321) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2MPainG