CVE-2024-28782

MEDIUM Year: 2024
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-256
View all →

Vulnerability Description

IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 285698.

Related Vulnerabilities

CVE-2020-1669

MEDIUM
CVSS:6.3(Medium)

The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. Th...

CWE-2562020

CVE-2020-3483

MEDIUM
CVSS:6.3(Medium)

Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted i...

CWE-2562020

CVE-2025-25727

MEDIUM
CVSS:6.2(Medium)

Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext.

CWE-2562025

CVE-2019-0032

MEDIUM
CVSS:6.5(Medium)

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these store...

CWE-2562019

CVE-2021-1589

MEDIUM
CVSS:6.5(Medium)

A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to user credentials. This vulnerability exis...

CWE-2562021

CVE-2021-36309

MEDIUM
CVSS:6.5(Medium)

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius cre...

CWE-2562021