CVE-2026-7365CWE-1392

IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

High · published May 27, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-05-27T13:55Z
EPSS history
Timeline
  • 27 MAY 13:55Z
    IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation
    cvelistv5