CVE-2024-40684

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40684
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/7268536 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4:*:*:*:*:*:*:*
History

05 Jun 2026, 18:57

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7268536 - () https://www.ibm.com/support/pages/node/7268536 - Vendor Advisory
First Time Ibm
Ibm operations Analytics Log Analysis
CPE cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2:*:*:*:*:*:*:*

27 May 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-27 14:16

Updated : 2026-06-05 18:57

NVD link : CVE-2024-40684

Mitre link : CVE-2024-40684

CVE.ORG link : CVE-2024-40684

JSON object : View

Products Affected

ibm

  • operations_analytics_log_analysis
CWE
CWE-521

Weak Password Requirements