IBM QRadar Suite Software Stores User Credentials in Plain Text
CVE-2024-25024

5.5MEDIUM

Key Information:

Vendor
IBM
Status
Qradar Suite Software
Cloud Pak For Security
Vendor
CVE Published:
15 August 2024

Summary

IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.

Affected Version(s)

Cloud Pak for Security 1.10.0.0 <= 1.10.11.0

QRadar Suite Software 1.10.12.0 <= 1.10.23.0

References

https://www.ibm.com/support/pages/node/7165488
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/281430
vdb-entry

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.