VDB
CVE-2024-25023
CVE-2024-25023
PUBLISHED
CVSS 5.5 MEDIUM
IBM QRadar Suite Software information disclosure
Reported by ibm · Published July 9, 2024
IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 281429.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| QRadar Suite Software | IBM | 1.10.22.0 |
| cloud_pak_for_security | ibm | 1.10.11.0 |
| Cloud Pak for Security | IBM | 1.10.11.0 |
| qradar_suite | ibm | 1.10.23.0 |
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| IBM | QRadar Suite Software | 1.10.12.0 |
| IBM | Cloud Pak for Security | 1.10.0.0 |
| IBM | QRadar Suite Software | 1.10.12.0 |
| IBM | Cloud Pak for Security | 1.10.0.0 |
Timeline
- Jul 9, 2024 CVE Published
- Jul 10, 2024 EPSS Score (30 in total, the first dated here)
- Sep 21, 2024 CVE Updated
- Oct 4, 2024 Coalition ESS Score (8 in total, the first dated here)
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-25023
vulnetix vdb fixes CVE-2024-25023Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-25023/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart