Description
IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.
Published: 2024-08-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-22386 IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.
History

Thu, 13 Mar 2025 20:15:00 +0100

Type Values Removed Values Added
Weaknesses CWE-256

Sat, 21 Sep 2024 12:00:00 +0200

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Thu, 29 Aug 2024 00:15:00 +0200

Type Values Removed Values Added
Weaknesses CWE-312
CPEs cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:*

Thu, 15 Aug 2024 16:30:00 +0200

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Aug 2024 05:00:00 +0200

Type Values Removed Values Added
Description IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.
Title IBM QRadar Suite Software information disclosure
First Time appeared Ibm
Ibm cloud Pak For Security
Ibm qradar Suite
CPEs cpe:2.3:a:ibm:cloud_pak_for_security:1.10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.10.11.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_suite:1.10.12.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_suite:1.10.23.0:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm cloud Pak For Security
Ibm qradar Suite
References
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Ibm Cloud Pak For Security Qradar Suite
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2025-03-13T19:10:24.949Z

Reserved: 2024-02-03T14:49:11.962Z

Link: CVE-2024-25024

cve-icon Vulnrichment

Updated: 2024-08-15T13:40:38.651Z

cve-icon NVD

Status : Modified

Published: 2024-08-15T03:15:04.353

Modified: 2026-06-17T07:15:23.623

Link: CVE-2024-25024

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-256

    Plaintext Storage of a Password

  • CWE-312

    Cleartext Storage of Sensitive Information