The account is not locked when account lockout is configured and wrong password is entered multiple times
This is noted as issue SD-121377 and fixed in 14830. Kindly upgrade your application to 14830 or above.
If you are not able to upgrade, please apply the workaround fjar file. Check the "Jar Compatibility" section before downloading the fix jar file (.fjar file). Check this
link on how to apply the fjar file.