CVE-2024-25024: IBM QRadar Suite Software information disclosure
First published: Wed Aug 14 2024(Updated: )
IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | <=1.10.0.0 - 1.10.11.0 | |
| IBM QRadar Suite Software | <=1.10.12.0 - 1.10.23.0 | |
| IBM Cloud Pak for Security | >=1.10.0.0<=1.10.11.0 | |
| IBM QRadar Suite | >=1.10.12.0<1.10.24.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-25024?
CVE-2024-25024 is classified as a vulnerability with potentially high impact due to the exposure of user credentials.
How do I fix CVE-2024-25024?
To remediate CVE-2024-25024, update IBM QRadar Suite Software to version 1.10.24.0 or later and IBM Cloud Pak for Security to version 1.10.12.0 or later.
What are the affected versions of QRadar Suite Software for CVE-2024-25024?
The affected versions of IBM QRadar Suite Software are 1.10.12.0 through 1.10.23.0.
What are the affected versions of Cloud Pak for Security for CVE-2024-25024?
The affected versions of IBM Cloud Pak for Security are 1.10.0.0 through 1.10.11.0.
What type of information is affected by CVE-2024-25024?
CVE-2024-25024 affects the storage of user credentials in plain clear text, making them readable by local users.
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/type
- agent/references
- agent/first-publish-date
- agent/title
- agent/description
- agent/event
- agent/author
- agent/weakness
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/trending
- agent/tags
- agent/source
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.10.0.0 - 1.10.11.0
- canonical/ibm qradar suite software
- version/ibm qradar suite software/1.10.12.0 - 1.10.23.0
- version/ibm cloud pak for security/1.10.0.0
- version/ibm cloud pak for security/1.10.11.0
- canonical/ibm qradar suite
- version/ibm qradar suite/1.10.12.0