PT-2025-23630 · Ibm · Ibm Qradar Suite+1

Ben Goodspeed + 5 · Published 2025-06-03 · Updated 2025-06-03 · CVE-2025-25022

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0

Description The issue allows an unauthenticated user in the environment to obtain highly sensitive information in configuration files. This could expose sensitive data to unauthenticated users.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0, update to version 1.11.3.0 to secure your environment. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to version 1.10.12.1 to secure your environment.

Fix

Weakness Enumeration

CWE-260

Related Identifiers

BDU:2025-06467

CVE-2025-25022

Affected Products

Ibm Cloud Pak For Security

Ibm Qradar Suite

References · 6

• https://osv.dev/vulnerability/CVE-2025-25022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25022 · Security Note
• https://bdu.fstec.ru/vul/2025-06467 · Security Note
• https://ibm.com/support/pages/node/7235432 · Vendor Advisory, Patch
• https://twitter.com/CveFindCom/status/1929926081940750533 · Twitter Post
• https://twitter.com/CVEnew/status/1929927227593957549 · Twitter Post