What is the severity of CVE-2024-31905?

CVE-2024-31905 is classified as a medium-severity vulnerability due to its potential to allow sensitive information exposure through man-in-the-middle attacks.

How do I fix CVE-2024-31905?

To fix CVE-2024-31905, ensure that HTTP Strict Transport Security is properly enabled in IBM QRadar Network Packet Capture.

Who is affected by CVE-2024-31905?

CVE-2024-31905 affects IBM QRadar Network Packet Capture versions 7.5.0 and its update packages.

What could an attacker achieve by exploiting CVE-2024-31905?

An attacker exploiting CVE-2024-31905 could obtain sensitive information through man-in-the-middle techniques.

Is CVE-2024-31905 being actively exploited in the wild?

As of now, there is no public evidence indicating that CVE-2024-31905 is being actively exploited in the wild.

Vulnerability/
CVE-2024-31905

medium

5.9

CWE

311

23/7/2024

15/8/2024

28/8/2024

CVE-2024-31905: IBM QRadar Network Packet Capture information disclosure

First published: Tue Jul 23 2024(Updated: )

IBM CounterflowAI could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM QRadar Network Packet Capture	<=7.5.0 - 7.5.0 Update Package 7
IBM QRadar Network Packet Capture	=7.5.0
IBM QRadar Network Packet Capture	=7.5.0-update_package_1
IBM QRadar Network Packet Capture	=7.5.0-update_package_2
IBM QRadar Network Packet Capture	=7.5.0-update_package_3
IBM QRadar Network Packet Capture	=7.5.0-update_package_4
IBM QRadar Network Packet Capture	=7.5.0-update_package_5
IBM QRadar Network Packet Capture	=7.5.0-update_package_6
IBM QRadar Network Packet Capture	=7.5.0-update_package_7

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-7160961

Frequently Asked Questions

What is the severity of CVE-2024-31905?
CVE-2024-31905 is classified as a medium-severity vulnerability due to its potential to allow sensitive information exposure through man-in-the-middle attacks.
How do I fix CVE-2024-31905?
To fix CVE-2024-31905, ensure that HTTP Strict Transport Security is properly enabled in IBM QRadar Network Packet Capture.
Who is affected by CVE-2024-31905?
CVE-2024-31905 affects IBM QRadar Network Packet Capture versions 7.5.0 and its update packages.
What could an attacker achieve by exploiting CVE-2024-31905?
An attacker exploiting CVE-2024-31905 could obtain sensitive information through man-in-the-middle techniques.
Is CVE-2024-31905 being actively exploited in the wild?
As of now, there is no public evidence indicating that CVE-2024-31905 is being actively exploited in the wild.

agent/title
agent/weakness
agent/references
agent/type
agent/description
agent/first-publish-date
collector/ibm-support
source/IBM
agent/software-canonical-lookup
agent/severity
agent/author
agent/event
collector/mitre-cve
source/MITRE
collector/nvd-api
source/NVD
agent/last-modified-date
agent/softwarecombine
agent/trending
agent/tags
agent/source
vendor/ibm
canonical/ibm qradar network packet capture
version/ibm qradar network packet capture/7.5.0 - 7.5.0 update package 7
version/ibm qradar network packet capture/7.5.0
version/ibm qradar network packet capture/7.5.0-update_package_1
version/ibm qradar network packet capture/7.5.0-update_package_2
version/ibm qradar network packet capture/7.5.0-update_package_3
version/ibm qradar network packet capture/7.5.0-update_package_4
version/ibm qradar network packet capture/7.5.0-update_package_5
version/ibm qradar network packet capture/7.5.0-update_package_6
version/ibm qradar network packet capture/7.5.0-update_package_7

Frequently Asked Questions

What is the severity of CVE-2024-31905?
CVE-2024-31905 is classified as a medium-severity vulnerability due to its potential to allow sensitive information exposure through man-in-the-middle attacks.
How do I fix CVE-2024-31905?
To fix CVE-2024-31905, ensure that HTTP Strict Transport Security is properly enabled in IBM QRadar Network Packet Capture.
Who is affected by CVE-2024-31905?
CVE-2024-31905 affects IBM QRadar Network Packet Capture versions 7.5.0 and its update packages.
What could an attacker achieve by exploiting CVE-2024-31905?
An attacker exploiting CVE-2024-31905 could obtain sensitive information through man-in-the-middle techniques.
Is CVE-2024-31905 being actively exploited in the wild?
As of now, there is no public evidence indicating that CVE-2024-31905 is being actively exploited in the wild.

CVE-2024-31905: IBM QRadar Network Packet Capture information disclosure

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-31905?

How do I fix CVE-2024-31905?

Who is affected by CVE-2024-31905?

What could an attacker achieve by exploiting CVE-2024-31905?

Is CVE-2024-31905 being actively exploited in the wild?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2024-31905?

How do I fix CVE-2024-31905?

Who is affected by CVE-2024-31905?

What could an attacker achieve by exploiting CVE-2024-31905?

Is CVE-2024-31905 being actively exploited in the wild?