5.9

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Update-
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_1
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_2
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_3
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_4
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_5
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_6
Ibm ≫ Qradar Network Packet Capture Version7.5.0 Updateupdate_package_7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.01% 0.017
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
psirt@us.ibm.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.