CVE-2024-22355
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2024-22355 is a vulnerability affecting IBM QRadar Suite Products 1.10.12.0 to 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 to 1.10.11.0. This issue allows unsecured default passwords for user accounts, making it simpler for attackers to gain unauthorized access. By default, these IBM products do not enforce strong password requirements, increasing the risk of compromised accounts. (IBM X-Force ID: 280781) In summary, the vulnerability identified as CVE-2024-22355 puts numerous IBM products at risk due to their lack of enforced strong password requirements. Versions 1.10.12.0 to 1.10.18.0 of IBM QRadar Suite Products and 1.10.0.0 to 1.10.11.0 of IBM Cloud Pak for Security are affected, potentially exposing user accounts to unauthorized access by attackers.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions