IBM QRadar Suite Software Stores User Credentials in Plain Text

CVE-2024-25024
5.5MEDIUM

Key Information

Vendor
IBM
Status
Qradar Suite Software
Cloud Pak For Security
Vendor
CVE Published:
15 August 2024

Summary

IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.

Affected Version(s)

QRadar Suite Software <= 1.10.23.0

Cloud Pak for Security <= 1.10.11.0

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.