CVE-2024-31905CWE-319
IBM QRadar Network Packet Capture information disclosure
Medium · published August 15, 2024
What it is
IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00303 · 21.8th percentile
- Weakness
- CWE-319 · Cleartext Transmission of Sensitive Information
- Published
- 2024-08-15T16:56Z
EPSS history
Timeline