Vulnerability Details CVE-2024-40684
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.6%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2024-40684
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3
-
cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4