Improper Account-Lockout Settings in IBM WebSphere eXtreme Scale

CVE-2015-2030

Summary

IBM WebSphere eXtreme Scale versions 7.1.0 prior to 7.1.0.3 and 7.1.1 prior to 7.1.1.1 feature an improper account-lockout mechanism. This flaw can be exploited by remote attackers to initiate brute-force attacks more easily, potentially compromising user accounts and sensitive data. It is crucial for users of these versions to implement appropriate security measures and apply patches to mitigate this risk.

References