CVE-2024-28782: IBM QRadar Suite Software information disclosure
IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.
Other sources
IBM QRadar Suite Software stores user credentials in plain clear text which can be read by an authenticated user.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28782?
CVE-2024-28782 is classified as a high severity vulnerability due to the storage of user credentials in plain text.
How do I fix CVE-2024-28782?
To mitigate CVE-2024-28782, upgrade IBM QRadar Suite Software to version 1.10.19.0 or later and IBM Cloud Pak for Security to version 1.10.12.0 or later.
Who is affected by CVE-2024-28782?
CVE-2024-28782 affects users of IBM QRadar Suite Software from versions 1.10.12.0 to 1.10.18.0 and IBM Cloud Pak for Security from versions 1.10.0.0 to 1.10.11.0.
What are the implications of CVE-2024-28782?
The implications of CVE-2024-28782 include the potential for unauthorized access to user accounts due to exposed plain text credentials.
Is CVE-2024-28782 related to any other security issues?
CVE-2024-28782 is a standalone vulnerability focused on credential storage, but it reflects broader security concerns around credential management practices.