PT-2024-20710
CVE-2024-25031
·
تاريخ النشر
2024-06-28
·
تاريخ التحديث
2024-08-01
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.4
Description
The issue is related to an inadequate account lockout setting, which could allow an attacker on the network to brute force account credentials.
Recommendations
For versions 2.0.0 through 2.0.4, consider implementing a more robust account lockout policy to prevent brute force attacks on account credentials.
As a temporary workaround, restrict network access to the IBM Storage Defender - Resiliency Service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾