IBM License Metric Tool and IBM BigFix Inventory CVE-2016-8962 Weak Password Security Vulnerability

Bugtraq ID:	98030
Class:	Design Error
CVE:	CVE-2016-8962
Remote:	Yes
Local:	No
Published:	Apr 21 2017 12:00AM
Updated:	May 02 2017 03:10AM
Credit:	IBM.
Vulnerable:	IBM License Metric Tool 9.2 IBM License Metric Tool 9.0.1 IBM License Metric Tool 9.2.6.0 IBM License Metric Tool 9.2.5.0 IBM License Metric Tool 9.2.4.0 IBM License Metric Tool 9.1.0.2 IBM License Metric Tool 9.1 IBM License Metric Tool 9.0 IBM BigFix Inventory 9.2 IBM BigFix Inventory 9.2.6.0 IBM BigFix Inventory 9.2.5.0 IBM BigFix Inventory 9.2.4.0 IBM BigFix Inventory 9.1 IBM BigFix Inventory 9.0
Not Vulnerable:	IBM License Metric Tool 9.2.7 IBM BigFix Inventory 9.2.7

IBM License Metric Tool and IBM BigFix Inventory CVE-2016-8962 Weak Password Security Vulnerability

IBM License Metric Tool and IBM BigFix Inventory are prone to a weak password security vulnerability.

Attackers can exploit this issue to gain unauthorized access to the system.

IBM License Metric Tool and IBM BigFix Inventory 9.x versions are vulnerable.

IBM License Metric Tool and IBM BigFix Inventory CVE-2016-8962 Weak Password Security Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM License Metric Tool and IBM BigFix Inventory CVE-2016-8962 Weak Password Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM License Metric Tool and IBM BigFix Inventory CVE-2016-8962 Weak Password Security Vulnerability

References:

• IBM Homepage (IBM)
  
• swg21995031: Vulnerability in password strength policy affects IBM License Metri (IBM)