5.3
Medium
CVE-2023-33859 IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy
Description
IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM X-Force ID: 257697.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security QRadar EDR | 3.12 | No fix stated |
Other CVEs of Security QRadar EDR
The 9 CVEs of Security QRadar EDR →
CVE-2024-45636
IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local…
4.1
Medium
CVE-2025-36376
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an…
6.3
Medium
CVE-2025-36377
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an…
6.3
Medium
CVE-2025-36379
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that…
5.9
Medium