CVE-2024-28786

Published: Jan 28, 2025Modified: Jul 25, 2025

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: psirt@us.ibm.com (Secondary)

Description

IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques.

Affected (10)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

10 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.5.0
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_1
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_2
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_3
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_4
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_5
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_6
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_7
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_8
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_9

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

https://www.ibm.com/support/pages/node/7173420

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.