VULNERABILITY INTELLIGENCE
CVE-2024-28782
CVSS score6.3 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.
Weakness classification
- psirt@us.ibm.com: CWE-256
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory