PT-2024-1917 · Ibm · Ibm Qradar Suite+1
Published
2024-02-16
·
Updated
2024-12-04
·
CVE-2024-22336
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM QRadar Suite versions 1.10.12.0 through 1.10.17.0
IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0
Description
The issue is related to insufficient protection of registration data in the IBM QRadar Suite and IBM Cloud Pak for Security platforms, which could allow an attacker to gain access to confidential data. Potentially sensitive information is stored in log files that could be read by a local user.
Recommendations
For IBM QRadar Suite versions 1.10.12.0 through 1.10.17.0, update to a version that includes the necessary security fixes to prevent sensitive information from being stored in log files.
For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version that includes the necessary security fixes to prevent sensitive information from being stored in log files.
As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Cloud Pak For Security
Ibm Qradar Suite