Vulnerability Details CVE-2024-40684
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.1%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2024-40684
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4