CVE-2024-25031

Name of the Vulnerable Software and Affected Versions IBM Storage Defender - Resiliency Service versions 2.0.0 through 2.0.4

Description The issue is related to an inadequate account lockout setting, which could allow an attacker on the network to brute force account credentials.

Recommendations For versions 2.0.0 through 2.0.4, consider implementing a more robust account lockout policy to prevent brute force attacks on account credentials. As a temporary workaround, restrict network access to the IBM Storage Defender - Resiliency Service to minimize the risk of exploitation.