CVE-2024-45638

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-45638
IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user.

4.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7185938 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:security_qradar_edr:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
History

16 Jul 2025, 15:24

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7185938 - () https://www.ibm.com/support/pages/node/7185938 - Vendor Advisory
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_qradar_edr:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Ibm security Qradar Edr
Linux
Ibm
Summary
  • (es) IBM Security QRadar 3.12 EDR almacena las credenciales de usuario en texto plano que puede ser leído por un usuario privilegiado local.

14 Mar 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-14 15:15

Updated : 2025-07-16 15:24

NVD link : CVE-2024-45638

Mitre link : CVE-2024-45638

CVE.ORG link : CVE-2024-45638

JSON object : View

Products Affected

ibm

  • security_qradar_edr

linux

  • linux_kernel
CWE
CWE-256

Unprotected Storage of Credentials