medium5.9
CVE-2025-36363
IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
Impact
IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Devops Plan | from 3.0.0 before 3.0.6 |