CVEvulnerability
CVE-2024-22355
5.9 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-521
Description
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 280781.
Affected configurations
• ibm cloud pak for security (>= 1.10.0.0 <= 1.10.11.0)
• ibm qradar suite (>= 1.10.12.0 <= 1.10.18.0)
Related
Weakness · CWE (1)
- CWE-521 Weak Password Requirements weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/280781 Vendor Advisory
- https://www.ibm.com/support/pages/node/7129328 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/280781 Vendor Advisory
- https://www.ibm.com/support/pages/node/7129328 Vendor Advisory