CVE-2024-28786

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM version 7.5

Description: The issue concerns the transmission of sensitive or security-critical data in cleartext in a communication channel. This could allow an unauthorized actor to obtain the data using man-in-the-middle techniques.

Recommendations: For IBM QRadar SIEM version 7.5, consider implementing encryption for the communication channel to protect sensitive data from interception. As a temporary workaround, restrict access to the communication channel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.