VULNERABILITY INTELLIGENCE

CVE-2024-22355

CVSS score5.9 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 280781.

Weakness classification

  • CWE-521: Weak Password Requirements

Primary references