CVE-2023-45191

IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 268755.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2024-02-09

Last modified

2024-11-07

Weaknesses

CWE-307

Affected products

• Engineering Lifecycle Optimization (Ibm)
• Engineering Lifecycle Optimization - Publishing (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/268755
• https://www.ibm.com/support/pages/node/7116045