CVE-2023-38273

published 2024-02-02

CVE-2023-38273: IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 260733.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	—	—
ibm	cloud_pak_system	2.3.3.0 – 2.3.3.6	—

CWE-307