CVE-2022-34333

IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 229698.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2023-04-07

Last modified

2025-02-10

Weaknesses

CWE-521

Affected products

• Sterling Order Management (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/229698
• https://www.ibm.com/support/pages/node/6981917