Vulnerability in Ibm Bigfix Platform

CVE-2018-1475

IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 140756.

EPSS: 0.004 (58.8th percentile) — read the EPSS interpretation.

Affected products

Ibm Bigfix Platform — versions 9.5, 9.2

References

ibm-bigfix-cve20181475-info-disc(140756) (vdb-entry, x_refsource_XF)
www.ibm.com/support/docview.wss (x_refsource_CONFIRM)