Medium · 5.9 CVE-2021-38890 EUVD-2021-25327GHSA-m882-7wv7-pwjj

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute…

Published Nov 23, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Connect:Direct Web Services

Description

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 209507.

Affected products

Vendor	Product	Affected	Fixed
IBM	Connect:Direct Web Services	6.0, 1.0	—

References

https://www.ibm.com/support/pages/node/6518586
ibm-sterling-cve202138890-info-disc (209507) vdb-entry