CVE-2024-40685: falha de média gravidade em IBM Operations Analytics - Log Analysis
IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.1%
IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis are vulnerable to a cross-site request forgery (CSRF) vulnerability that could allow an attacker to trick a trusted user into performing unauthorized actions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
IBM · Operations Analytics - Log AnalysisCVEs relacionadas — IBM Operations Analytics - Log Analysis
No mesmo produto, das mais perigosas para as menos.
CVE-2024-40684MEDIUMIBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout MechanismEPSS 0.4%CVE-2024-40683MEDIUMIBM Operations Analytics - Log Analysis is affected by a TOCTOU weakness allowing active sessions to persist beyond a password changeEPSS 0.3%CVE-2026-7365HIGHIBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installationEPSS 0.1%