IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 260733.
| Software | From | Fixed in |
|---|---|---|
| ibm / cloud_pak_system | 2.3.3.0 | 2.3.3.6.x |
| ibm / cloud_pak_system | 2.3.3.7 | 2.3.3.7.x |
| ibm / cloud_pak_system | 2.3.1.1 | 2.3.1.1.x |
| ibm / cloud_pak_system | 2.3.2.0 | 2.3.2.0.x |