CVE-2021-20415

IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials

Medium · published July 7, 2021

CVSS v3.0
5.9
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/A:N/AV:N/PR:N/AC:H/S:U/C:H/I:N/UI:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00937 · 60.5th percentile
Published
2021-07-07T16:30Z
EPSS history
Timeline
  • 07 JUL 16:30Z
    IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials
    cvelistv5