CVE-2024-40684

IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2026-05-27

Last modified

2026-05-27

Weaknesses

CWE-521

Affected products

• Operations Analytics Log Analysis (Ibm)
• Operations Analytics Log Analysis (Ibm)

References

• https://www.ibm.com/support/pages/node/7268536