CVE-2024-27269

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27269
IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive information across tenants. IBM X-Force ID: 284575.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/284575 Third Party Advisory
https://www.ibm.com/support/pages/node/7150684 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/284575 Third Party Advisory
https://www.ibm.com/support/pages/node/7150684 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
History

25 Jul 2025, 21:05

Type Values Removed Values Added
First Time Ibm
Linux linux Kernel
Ibm qradar Security Information And Event Manager
Linux
CPE cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_7:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_6:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:*:*:*:*:*:*
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/284575 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/284575 - Third Party Advisory
References () https://www.ibm.com/support/pages/node/7150684 - () https://www.ibm.com/support/pages/node/7150684 - Vendor Advisory

21 Nov 2024, 09:04

Type Values Removed Values Added
Summary
  • (es) IBM QRadar SIEM 7.5 podría permitir a un usuario privilegiado configurar una gestión de usuarios que revelaría información confidencial no deseada entre los inquilinos. ID de IBM X-Force: 284575.
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/284575 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/284575 -
References () https://www.ibm.com/support/pages/node/7150684 - () https://www.ibm.com/support/pages/node/7150684 -

14 May 2024, 15:11

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-14 15:11

Updated : 2025-07-25 21:05

NVD link : CVE-2024-27269

Mitre link : CVE-2024-27269

CVE.ORG link : CVE-2024-27269

JSON object : View

Products Affected

ibm

  • qradar_security_information_and_event_manager

linux

  • linux_kernel
CWE
CWE-286

Incorrect User Management