PT-2019-17031
CVE-2019-4310
·
Published
2019-08-20
·
Updated
2023-01-31
Description by
CVSS 3.1
7.5
HighMetricsAC:L/A:N/C:H/PR:N/I:N/UI:N/AV:N/S:U
Name of the Vulnerable Software and Affected Versions
IBM Security Guardium Big Data Intelligence version 4.0 (SonarG)
Description
The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials.
Recommendations
For IBM Security Guardium Big Data Intelligence version 4.0 (SonarG), consider implementing a more robust account lockout policy to prevent brute-force attacks. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾