PT-2025-23630

CVE-2025-25022

Published

2025-06-03

Updated

2025-06-03

Description by

CVSS 3.1

9.6

Critical

MetricsAV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0

Description The issue allows an unauthenticated user in the environment to obtain highly sensitive information in configuration files. This could expose sensitive data to unauthenticated users.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0, update to version 1.11.3.0 to secure your environment. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to version 1.10.12.1 to secure your environment.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration