{"id":"CVE-2017-1221","aliases":["EUVD-2017-10237","GHSA-8cqw-729q-hxw7"],"status":"published","title":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have...","description":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01581,"percentile":0.75693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-521"],"published":"2017-11-13T23:00:00Z","modified":"2026-06-17T01:14:04Z","products":[{"vendor":"hclsoftware","product":"bigfix platform"},{"vendor":"ibm","product":"bigfix platform"},{"vendor":"ibm","product":"bigfix_platform"}],"references":[{"url":"http://www.securityfocus.com/bid/101683","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/123861","tags":["x_refsource_MISC","x_transferred","Issue Tracking","VDB Entry","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22010177","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1221"},{"url":"https://github.com/advisories/GHSA-8cqw-729q-hxw7"}],"sources":{"cve":[{"id":"CVE-2017-1221","description":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.","status":"published","published":"2017-11-13T23:00:00Z","modified":"2024-09-17T03:02:31.456Z","updated_at":"2026-11-02T14:33:19.548789Z"}],"euvd":[{"id":"EUVD-2017-10237","description":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.","status":"published","published":"2017-11-13T23:00:00Z","modified":"2024-09-17T03:02:31Z","updated_at":"2026-11-03T00:28:35.090816Z"}],"ghsa":[{"id":"GHSA-8cqw-729q-hxw7","title":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have...","description":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.","status":"published","published":"2022-05-13T01:42:39Z","modified":"2023-02-02T05:00:50Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-521"],"updated_at":"2026-11-02T14:51:03.373063Z"}],"nvd":[{"id":"CVE-2017-1221","description":"IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 123861.","status":"published","published":"2017-11-13T23:29:00.197Z","modified":"2026-06-17T01:14:04.92Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-521"],"updated_at":"2026-11-02T14:04:08.635428Z"}]}}