VulnerabilityAnalyzed

CVE-2024-22336

IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user.

MEDIUM 5.5EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279976.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.19% probability · 9th percentile
CISA KEV: Not listed
Weakness: CWE-532
Affected: ibm/cloud pak for security · ibm/qradar suite
Source: psirt@us.ibm.com

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/279976VDB Entry
https://www.ibm.com/support/pages/node/7118642Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/279976VDB Entry
https://www.ibm.com/support/pages/node/7118642Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.