CVE-2024-28782: IBM QRadar Suite Software information disclosure
First published: Tue Apr 02 2024(Updated: )
IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | <=1.10.0.0 - 1.10.11.0 | |
| IBM QRadar Suite Software | <=1.10.12.0 - 1.10.18.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-28782?
CVE-2024-28782 is classified as a high severity vulnerability due to the storage of user credentials in plain text.
How do I fix CVE-2024-28782?
To mitigate CVE-2024-28782, upgrade IBM QRadar Suite Software to version 1.10.19.0 or later and IBM Cloud Pak for Security to version 1.10.12.0 or later.
Who is affected by CVE-2024-28782?
CVE-2024-28782 affects users of IBM QRadar Suite Software from versions 1.10.12.0 to 1.10.18.0 and IBM Cloud Pak for Security from versions 1.10.0.0 to 1.10.11.0.
What are the implications of CVE-2024-28782?
The implications of CVE-2024-28782 include the potential for unauthorized access to user accounts due to exposed plain text credentials.
Is CVE-2024-28782 related to any other security issues?
CVE-2024-28782 is a standalone vulnerability focused on credential storage, but it reflects broader security concerns around credential management practices.
- agent/weakness
- agent/references
- agent/title
- agent/type
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/tags
- agent/source
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.10.0.0 - 1.10.11.0
- canonical/ibm qradar suite software
- version/ibm qradar suite software/1.10.12.0 - 1.10.18.0