Design/Logic Flaw

2020-07-2914:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.2%

JSON

IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 184156.

CPENameOperatorVersion
security_key_lifecycle_managereq3.0.1
security_key_lifecycle_managereq4.0

CPE	Name	Operator	Version
	security_key_lifecycle_manager	eq	3.0.1
	security_key_lifecycle_manager	eq	4.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/184156

www.ibm.com/support/pages/node/6253781