CVE-2025-25022

The vulnerability classified as CWE-260 (Password in Configuration File) consists of sensitive data — potentially including passwords or keys — being stored in configuration files in a manner accessible without authentication. An unauthenticated user with network access to the environment (AV:A vector — access from local/adjacent network) can read these files and obtain critical data. The lack of authentication requirement (PR:N) and user interaction (UI:N) means that the attack can be performed in a fully automated manner.

An attacker can obtain highly sensitive information from configuration files, which may lead to further system takeover, privilege escalation, or lateral movement within the infrastructure. The scope of the vulnerability includes complete breach of confidentiality, integrity, and availability (S:C, C:H, I:H, A:H).

Patches available from the vendor should be applied according to the references: https://www.ibm.com/support/pages/node/7235432

IBM QRadar Suite Software in versions from 1.10.12.0 to 1.11.2.0 and IBM Cloud Pak for Security in versions from 1.10.0.0 to 1.10.11.0.