Vulnerabilities > CVE-2023-38273 - Improper Restriction of Excessive Authentication Attempts vulnerability in IBM Cloud PAK System
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 260733.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 9 |