CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2024-22355 – IBM QRadar Suite information dislosure
https://notcve.org/view.php?id=CVE-2024-22355
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 280781. • https://exchange.xforce.ibmcloud.com/vulnerabilities/280781 https://www.ibm.com/support/pages/node/7129328 • CWE-521: Weak Password Requirements •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2023-47742 – IBM QRadar Suite information dislosure
https://notcve.org/view.php?id=CVE-2023-47742
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533. • https://exchange.xforce.ibmcloud.com/vulnerabilities/272533 https://www.ibm.com/support/pages/node/7129328 • CWE-295: Improper Certificate Validation CWE-300: Channel Accessible by Non-Endpoint •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2021-39090 – IBM Cloud Pak for Security information disclosure
https://notcve.org/view.php?id=CVE-2021-39090
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 216388. IBM Cloud Pak for Security (CP4S) 1.10.0.0 a 1.10.6.0 podría permitir que un atacante remoto obtenga información confidencial, causada por no habilitar correctamente HTTP Strict Transport Security. Un atacante podría aprovechar esta vulnerabilidad para obtener información confidencial utilizando técnicas de intermediario. • https://exchange.xforce.ibmcloud.com/vulnerabilities/216388 https://www.ibm.com/support/pages/node/6856407 • CWE-311: Missing Encryption of Sensitive Data •
CVSS: 4.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-50951 – IBM QRadar Suite information disclosure
https://notcve.org/view.php?id=CVE-2023-50951
IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some sensitive information about invalid authorization attempts. IBM X-Force ID: 275747. IBM QRadar Suite 1.10.12.0 a 1.10.17.0 e IBM Cloud Pak for Security 1.10.0.0 a 1.10.11.0 en algunas circunstancias registrarán información confidencial sobre intentos de autorización no válidos. ID de IBM X-Force: 275747. • https://exchange.xforce.ibmcloud.com/vulnerabilities/275747 https://www.ibm.com/support/pages/node/7118604 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.1EPSS: 0%CPEs: 2EXPL: 0CVE-2024-22337 – IBM QRadar Suite information disclosure
https://notcve.org/view.php?id=CVE-2024-22337
IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279977. IBM QRadar Suite 1.10.12.0 a 1.10.17.0 e IBM Cloud Pak for Security 1.10.0.0 a 1.10.11.0 almacenan información potencialmente confidencial en archivos de registro que un usuario local podría leer. ID de IBM X-Force: 279977. • https://exchange.xforce.ibmcloud.com/vulnerabilities/279977 https://www.ibm.com/support/pages/node/7118642 • CWE-532: Insertion of Sensitive Information into Log File •