Description
IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Privileged Identity Manager | 1.0.1, 1.0.1.1, 2.0.0, 2.0.1, 2.0.2, 2.1.0 | — |