CVE-2024-28786

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 28, 2025
CWE ID 319

Summary

CVE-2024-28786 is a vulnerability affecting IBM QRadar Security Information and Event Management (SIEM) version 7.5. This issue allows unauthorized actors, using man-in-the-middle techniques, to intercept and obtain sensitive or security-critical data transmitted in cleartext over a communication channel. The impact includes potential data breaches or system compromise, emphasizing the importance of applying the necessary patch or mitigation measures to safeguard affected systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM QRadar SIEM

Affected Vendors

  • IBM Corporation