Lucene search

IbmVULNRICHMENT:CVE-2024-28799

HistoryAug 14, 2024 - 3:41 p.m.

CVE-2024-28799 IBM QRadar Suite Software information disclosure

2024-08-1415:41:30

CWE-214

ibm

github.com

ibm

qradar suite

cloud pak

information disclosure

vulnerability

x-force id

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

37.8%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 displays sensitive data improperly to a local user during back-end commands which may result in the unexpected disclosure of this information under certain conditions. IBM X-Force ID: 287173.

References

exchange.xforce.ibmcloud.com/vulnerabilities/287173

www.ibm.com/support/pages/node/7165488

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

37.8%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-28799