Engineering Lifecycle Optimization vulnerabilities

2 known vulnerabilities in Engineering Lifecycle Optimization from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Engineering Lifecycle Optimization - Publishing: Improper Restriction of Excessive Authentication Attempts

  CVE-2023-45191Feb 9, 2024IBM

  IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 268755.

• 8.8 High severity

  IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate…

  CVE-2023-45187Feb 9, 2024IBM

  IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 268749.