CVE-2021-38890

Name of the Vulnerable Software and Affected Versions IBM Sterling Connect:Direct Web Services versions 1.0 through 6.0

Description The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials.

Recommendations For versions 1.0 through 6.0, consider implementing a more robust account lockout policy to prevent brute-force attacks. As a temporary workaround, consider restricting access to the login functionality until a more secure account lockout setting can be implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.