7.5
High
CVE-2020-4400 IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker…
Description
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Verify Gateway (IVG) 1.0 | 1.0.0 → 1.0.1 | No fix stated |
Other CVEs of Verify Gateway (IVG)
The 8 CVEs of Verify Gateway (IVG) →
CVE-2020-4405
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due…
3.1
Low
CVE-2020-4397
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an…
6.8
Medium
CVE-2020-4399
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a…
6.5
Medium
CVE-2020-4372
IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local…
6.2
Medium