CVE-2020-4400

Name of the Vulnerable Software and Affected Versions IBM Verify Gateway (IVG) versions 1.0.0 through 1.0.1

Description The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials.

Recommendations For versions 1.0.0 and 1.0.1, consider implementing a more robust account lockout policy to prevent brute force attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.