Skip to main content

Password in Configuration File

CVE-2025-25022

High
9.6/10

Summary

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.

  • LOW
  • ADJACENT_NETWORK
  • HIGH
  • CHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-260 - Password in Configuration File

The software stores a password in a configuration file that might be accessible to actors who do not know the password.

References

Advisory Timeline

  • Published