PT-2024-22572 · Ibm · Ibm Qradar Suite+1

Chris Shepherd + 7 · Published 2024-04-03 · Updated 2025-08-14 · CVE-2024-28782

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.10.18.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0

Description The issue concerns the storage of user credentials in plain clear text, which can be read by an authenticated user.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.18.0, update to a version that stores user credentials securely. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version that stores user credentials securely. As a temporary workaround, consider restricting access to areas where user credentials are stored to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2024-28782

Affected Products

Ibm Cloud Pak For Security

Ibm Qradar Suite

References · 7

• https://osv.dev/vulnerability/CVE-2024-28782 · Vendor Advisory
• https://ibm.com/support/pages/node/7145683 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28782 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/285698 · Vendor Advisory
• https://t.me/cveNotify/132319 · Telegram Post
• https://t.me/cvenotify/75629 · Telegram Post
• https://twitter.com/CVEnew/status/1775500284187357460 · Twitter Post