CVE-2024-28782CWE-256

IBM QRadar Suite Software information disclosure

Medium · published April 3, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.1th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2024-04-03T12:00Z
EPSS history
Timeline
  • 03 APR 12:00Z
    IBM QRadar Suite Software information disclosure
    cvelistv5