CVE-2024-31905

Published: Aug 15, 2024Modified: Sep 29, 2025

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Affected (8)

Products: Ibm: Qradar Network Packet Capture

Ibm

1 product

Qradar Network Packet Capture

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Network Packet Capture	Version 7.5.0
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_1
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_2
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_3
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_4
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_5
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_6
Ibm Qradar Network Packet Capture	Version 7.5.0 update_package_7

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

https://www.ibm.com/support/pages/node/7160961

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.