Skip to content
Sign in
5.9 Medium

CVE-2025-36363 IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to…

Description

IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

Affected products and versions

Product Affected versions Fixed in
DevOps Plan 3.0 3.0.0 → 3.0.5 No fix stated

Other CVEs of DevOps Plan

The 3 CVEs of DevOps Plan →
CVE-2026-4096 IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by… 6.5 Medium CVE-2025-36364 IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on… 6.2 Medium
Track this CVE