CVE Catalog
CVE-2016-5964
CriticalSummary
IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 has inadequate account lockout settings that could allow a remote attacker to brute force account credentials.
Risk Assessment
Inadequate account lockout settings may lead to unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to configure appropriate account lockout settings to minimize the risk of brute force attacks.
Original NVD description (English source)
IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.