Weak Password Policy in IBM Operations Analytics - Log Analysis
CVE-2024-40684

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Operations Analytics - Log Analysis
Vendor
CVE Published:
27 May 2026

What is CVE-2024-40684?

IBM Operations Analytics - Log Analysis versions 1.3.5.0 through 1.3.8.4 have a vulnerability related to insufficient password requirements, allowing attackers to easily compromise user accounts. The default settings do not enforce strong password creation, increasing the risk of unauthorized access. It is crucial for users of affected versions to implement stronger password practices and consider applying available patches to enhance their security posture.

Affected Version(s)

Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3 <= 7.2.0.14

Operations Analytics - Log Analysis 1.3.6.0, 1.3.6.1

Operations Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2

References

https://www.ibm.com/support/pages/node/7268536
vendor-advisorypatch

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.