CVE-2024-45636

IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user.

CVSS v3 4.1 MEDIUM

4.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7274828	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:security_qradar_edr:*:*:*:*:*:*:*:*

History

02 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) IBM Security QRadar EDR 3.12 hasta 3.12.24 almacena credenciales de usuario en texto plano que pueden ser leídas por un usuario privilegiado local.

Information

Published : 2026-06-11 16:16

Updated : 2026-10-02 00:10

NVD link : CVE-2024-45636

Mitre link : CVE-2024-45636

CVE.ORG link : CVE-2024-45636

JSON object : View

Products Affected

ibm

security_qradar_edr

CWE

CWE-256

Plaintext Storage of a Password

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2024-45636", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-45636", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-11T15:41:43.602422Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:security_qradar_edr:3.12:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_qradar_edr:3.12.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_qradar_edr:3.12.24:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Security QRadar EDR", "versions": [{"status": "affected", "version": "3.12.0", "versionType": "semver", "lessThanOrEqual": "3.12.24"}]}]}], "published": "2026-06-11T16:16:21.357", "references": [{"url": "https://www.ibm.com/support/pages/node/7274828", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-256"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileged user."}, {"lang": "es", "value": "IBM Security QRadar EDR 3.12 hasta 3.12.24 almacena credenciales de usuario en texto plano que pueden ser le\u00eddas por un usuario privilegiado local."}], "lastModified": "2026-10-02T00:10:00.180", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_qradar_edr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FB87523-C235-4493-98FD-EA8B6AE04C0D", "versionEndExcluding": "3.12.25", "versionStartIncluding": "3.12"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}