CVE-2017-1597

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 132610.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-521

Affected software

No affected versions have been published.

Timeline

Published
Dec 17, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-159709.8PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.CVE-2017-159719.8Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or CVE-2017-159729.8SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameterCVE-2017-159739.8Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.CVE-2017-159749.8tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.CVE-2017-159759.8Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.CVE-2017-159769.8ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.CVE-2017-159779.8Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.CVE-2017-159789.8AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.CVE-2017-159799.8Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.CVE-2017-15987.5IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrCVE-2017-159809.8US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
CVE-2017-1597: High severity, CVSS 7.5 | Vulnix