PT-2024-6129 · Ibm · Ibm Qradar Suite+1
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM QRadar Suite Software versions 1.10.12.0 through 1.10.22.0
IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0
Description
The issue is related to weaknesses in the error reporting mechanism of IBM QRadar Suite and IBM Cloud Pak for Security. This could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. The obtained information could be used in further attacks against the system.
Recommendations
For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.22.0, update to a version outside of this range to mitigate the risk.
For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to detailed technical error messages to minimize the risk of exploitation.
Fix
Generation of Error Message Containing Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Cloud Pak For Security
Ibm Qradar Suite