CVE-2024-22355

Summary

CVE-2024-22355 is a vulnerability affecting IBM QRadar Suite Products 1.10.12.0 to 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 to 1.10.11.0. This issue allows unsecured default passwords for user accounts, making it simpler for attackers to gain unauthorized access. By default, these IBM products do not enforce strong password requirements, increasing the risk of compromised accounts. (IBM X-Force ID: 280781) In summary, the vulnerability identified as CVE-2024-22355 puts numerous IBM products at risk due to their lack of enforced strong password requirements. Versions 1.10.12.0 to 1.10.18.0 of IBM QRadar Suite Products and 1.10.0.0 to 1.10.11.0 of IBM Cloud Pak for Security are affected, potentially exposing user accounts to unauthorized access by attackers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.