IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

中危 CVSS 5.9

CVECVE-2025-36363

首次发现2026-07-27 19:15 UTC

披露时间2026-03-03 20:16 UTC

最后更新2026-07-27 19:15 UTC

通道状态auto

摘要

IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。