CVE Catalog
CVE-2025-36363
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
Risk Assessment
An attacker could gain unauthorized access to user accounts via brute force, potentially leading to data confidentiality and integrity breaches.
Recommendation
Configure proper account lockout policies (e.g., login attempt limits) or upgrade to a newer version of IBM DevOps Plan if available.
Original NVD description (English source)
IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.