Lucene search

K
cve[email protected]CVE-2024-22355
HistoryMar 03, 2024 - 1:15 p.m.

CVE-2024-22355

2024-03-0313:15:07
CWE-521
web.nvd.nist.gov
40
ibm
qradar
cloud pak
security
vulnerability
cve-2024-22355
passwords
compromise

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 280781.

Affected configurations

Vulners
Node
ibmqradar_suiteRange1.10.12.01.10.18.0
OR
ibmcloud_pak_for_securityRange1.10.0.01.10.11.0
VendorProductVersionCPE
ibmqradar_suite*cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:*
ibmcloud_pak_for_security*cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "QRadar Suite Products",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "1.10.18.0",
        "status": "affected",
        "version": "1.10.12.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cloud Pak for Security",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "1.10.11.0",
        "status": "affected",
        "version": "1.10.0.0",
        "versionType": "semver"
      }
    ]
  }
]

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

Related for CVE-2024-22355