High · 7.5 CVE-2020-4400 EUVD-2020-25647GHSA-9v3j-42rv-3cwm

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force accou…

Published Jul 22, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Verify Gateway (IVG)

Description

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478.

Affected products

Vendor	Product	Affected	Fixed
IBM	Verify Gateway (IVG)	1.0.0, 1.0.1	—

References

https://www.ibm.com/support/pages/node/6251279
ibm-ivg-cve20204400-info-disc (179478) vdb-entry