5.9

CVE-2024-31905

IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update -
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_1
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_2
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_3
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_4
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_5
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_6
Ibm ≫ Qradar Network Packet Capture Version 7.5.0 Update update_package_7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.217
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
IBM 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://www.ibm.com/support/pages/node/7160961
Vendor Advisory