CVE-2024-45636: falha de média gravidade em IBM Security QRadar EDR
IBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information.
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.1epss 0.1%
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · Security QRadar EDRCVEs relacionadas — IBM Security QRadar EDR
No mesmo produto, das mais perigosas para as menos.
CVE-2024-45100MEDIUMIBM Security QRadar EDR denial of serviceEPSS 0.6%CVE-2023-33859MEDIUMIBM Security ReaQta information disclosureEPSS 0.4%CVE-2024-45640MEDIUMIBM Security QRadar EDR information disclosureEPSS 0.3%CVE-2023-35006MEDIUMIBM Security ReaQta HTML injectionEPSS 0.3%CVE-2023-33860MEDIUMIBM Security ReaQta information disclosureEPSS 0.2%CVE-2025-36376MEDIUMIBM Security QRadar EDR Software has multiple vulnerabilitiesEPSS 0.2%