CVE-2018-1475

IBM BigFix Platform 9.2 and 9.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 140756.

• CWE-307

• http://www.ibm.com/support/docview.wss?uid=swg22015754Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140756VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22015754Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140756VDB Entry, Vendor Advisory

Published

Apr 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14744An issue was discovered in libpbc.a in cloudwu PBC through 2…
• CVE-2018-14745Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-…
• CVE-2018-14746Command Injection vulnerability in QTS 4.3.5 build 20181013,…
• CVE-2018-14747NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20…
• CVE-2018-14748Improper Authorization vulnerability in QTS 4.3.5 build 2018…
• CVE-2018-14749Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, Q…
• CVE-2018-1476IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5…5.3
• CVE-2018-14767In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted S…
• CVE-2018-14768Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS…
• CVE-2018-14769VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.
• CVE-2018-14770VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote…
• CVE-2018-14771VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote…