Medium · 5.9 CVE-2025-36363 EUVD-2025-208254GHSA-9jh8-xh9x-6w7f

IBM DevOps Plan is vulnerable to Excessive Authentication Attempts

Published Mar 3, 2026 · Updated Mar 4, 2026 · Assigned by ibm

Description

IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

Vendor	Product	Affected	Fixed
IBM	DevOps Plan	3.0.0 – ≤ 3.0.5	—