CVE-2024-25024: IBM QRadar Suite Software information disclosure
IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430.
Other sources
IBM QRadar Suite stores user credentials in plain clear text which can be read by a local user.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25024?
CVE-2024-25024 is classified as a vulnerability with potentially high impact due to the exposure of user credentials.
How do I fix CVE-2024-25024?
To remediate CVE-2024-25024, update IBM QRadar Suite Software to version 1.10.24.0 or later and IBM Cloud Pak for Security to version 1.10.12.0 or later.
What are the affected versions of QRadar Suite Software for CVE-2024-25024?
The affected versions of IBM QRadar Suite Software are 1.10.12.0 through 1.10.23.0.
What are the affected versions of Cloud Pak for Security for CVE-2024-25024?
The affected versions of IBM Cloud Pak for Security are 1.10.0.0 through 1.10.11.0.
What type of information is affected by CVE-2024-25024?
CVE-2024-25024 affects the storage of user credentials in plain clear text, making them readable by local users.