{"containers": {"cna": {"affected": [{"product": "Intelligent Operations Center", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.1.0"}, {"status": "affected", "version": "5.1.0.1"}, {"status": "affected", "version": "5.1.0.2"}, {"status": "affected", "version": "5.1.0.3"}, {"status": "affected", "version": "5.1.0.4"}, {"status": "affected", "version": "5.1.0.5"}, {"status": "affected", "version": "5.1.0.6"}, {"status": "affected", "version": "5.1.0.7"}, {"status": "affected", "version": "5.1.0.8"}, {"status": "affected", "version": "5.1.0.9"}, {"status": "affected", "version": "5.1.0.10"}, {"status": "affected", "version": "5.1.0.11"}, {"status": "affected", "version": "5.1.0.12"}, {"status": "affected", "version": "5.1.0.13"}, {"status": "affected", "version": "5.1.0.14"}, {"status": "affected", "version": "5.2.0"}]}], "datePublic": "2019-05-31T00:00:00", "descriptions": [{"lang": "en", "value": "IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012."}], "metrics": [{"cvssV3_0": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "exploitCodeMaturity": "UNPROVEN", "integrityImpact": "NONE", "privilegesRequired": "NONE", "remediationLevel": "OFFICIAL_FIX", "reportConfidence": "CONFIRMED", "scope": "UNCHANGED", "temporalScore": 5.2, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.0/I:N/AV:N/PR:N/UI:N/AC:H/C:H/S:U/A:N/E:U/RC:C/RL:O", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-06-07T14:40:19", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10880213"}, {"name": "ibm-ioc-cve20194067-info-disc (157012)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/157012"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2019-05-31T00:00:00", "ID": "CVE-2019-4067", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intelligent Operations Center", "version": {"version_data": [{"version_value": "5.1.0"}, {"version_value": "5.1.0.1"}, {"version_value": "5.1.0.2"}, {"version_value": "5.1.0.3"}, {"version_value": "5.1.0.4"}, {"version_value": "5.1.0.5"}, {"version_value": "5.1.0.6"}, {"version_value": "5.1.0.7"}, {"version_value": "5.1.0.8"}, {"version_value": "5.1.0.9"}, {"version_value": "5.1.0.10"}, {"version_value": "5.1.0.11"}, {"version_value": "5.1.0.12"}, {"version_value": "5.1.0.13"}, {"version_value": "5.1.0.14"}, {"version_value": "5.2.0"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012."}]}, "impact": {"cvssv3": {"BM": {"A": "N", "AC": "H", "AV": "N", "C": "H", "I": "N", "PR": "N", "S": "U", "UI": "N"}, "TM": {"E": "U", "RC": "C", "RL": "O"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "https://www.ibm.com/support/docview.wss?uid=ibm10880213", "refsource": "CONFIRM", "title": "IBM Security Bulletin 880213 (Intelligent Operations Center)", "url": "https://www.ibm.com/support/docview.wss?uid=ibm10880213"}, {"name": "ibm-ioc-cve20194067-info-disc (157012)", "refsource": "XF", "title": "X-Force Vulnerability Report", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/157012"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T19:26:27.954Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10880213"}, {"name": "ibm-ioc-cve20194067-info-disc (157012)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/157012"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2019-4067", "datePublished": "2019-06-07T14:40:19.556987Z", "dateReserved": "2019-01-03T00:00:00", "dateUpdated": "2024-09-16T17:24:10.565Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:intelligent_operations_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D3CB03F-BB39-4860-816D-2C5DC3DB95D8", "versionEndIncluding": "5.2.0", "versionStartIncluding": "5.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:intelligent_operations_center_for_emergency_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F71BB0B-10A9-4569-8068-DBF3CD7DB2AB", "versionEndIncluding": "5.1.0.6", "versionStartIncluding": "5.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:water_operations_for_waternamics:*:*:*:*:*:*:*:*", "matchCriteriaId": "B211074E-17D9-434D-912B-67A7BB7FAC80", "versionEndIncluding": "5.2.1.1", "versionStartIncluding": "5.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 157012."}, {"lang": "es", "value": "IBM Intelligent Operations Center (IOC) versi\u00f3n 5.1.0 hasta la versi\u00f3n 5.2.0 no requiere que los usuarios tengan contrase\u00f1as seguras por defecto, lo que facilita que atacantes comprometan las cuentas de usuario. ID de IBM X-Force: 157012."}], "id": "CVE-2019-4067", "lastModified": "2023-02-03T18:52:23.667", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-06-07T15:29:01.577", "references": [{"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/157012"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10880213"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-521"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}