Vulnerabilities > IBM > Bigfix Security Compliance Analytics > Critical

DATE CVE VULNERABILITY TITLE RISK
2017-06-15 CVE-2017-1197 Improper Restriction of Excessive Authentication Attempts vulnerability in IBM Bigfix Security Compliance Analytics 1.9.70
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
network
low complexity
ibm CWE-307
critical
9.8
2017-06-07 CVE-2017-1196 Weak Password Requirements vulnerability in IBM Bigfix Security Compliance Analytics 1.9.70
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
network
low complexity
ibm CWE-521
critical
9.8