CVE-2024-41778

IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-03-01

Last modified

2025-09-01

Weaknesses

CWE-521

Affected products

• Controller (Ibm)

References

• https://www.ibm.com/support/pages/node/7184423