CVE-2018-1372: IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong pas...

Security readout for executives and security teams

IBM Security Guardium Big Data Intelligence, also called SonarG, version 3.1 did not require strong passwords by default. This can make account compromise easier, especially where the product is reachable by untrusted users or administrators kept weak passwords. Exposure appears limited to organizations running IBM Security Guardium Big Data Intelligence 3.1. Risk is higher for internet-reachable or broadly accessible deployments and accounts with weak, reused, or default-like passwords. Treat this as a credential-risk issue, not a remote-code-execution emergency. Prioritize if SonarG 3.1 is still in production, exposed outside trusted networks, or used to protect sensitive data assets. Mitigation focus: Review IBM advisory swg22013832 for vendor remediation guidance.; Enforce strong password requirements for all SonarG 3.1 accounts where configurable.; Reset weak, shared, reused, or default-like account passwords..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.