CVE-2024-7577
Published: 29 March 2025
Description
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials.
Security Summary
CVE-2024-7577 is a vulnerability in IBM InfoSphere Information Server 11.7 that could allow disclosure of sensitive user credentials from log files during a new installation of the product. This issue stems from CWE-532 (Insertion of Sensitive Information into Log File) and has a CVSS v3.1 base score of 4.4 (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N), indicating medium severity primarily due to high confidentiality impact.
Exploitation requires a high-privileged user (PR:H) with network access (AV:N) to the affected system, though it involves high attack complexity (AC:H) and no user interaction (UI:N). A successful attacker could achieve high-impact unauthorized access to sensitive credentials stored in the log files, but with no impact on integrity or availability and unchanged scope (S:U).
For mitigation details, refer to the IBM security advisory at https://www.ibm.com/support/pages/node/7185020, which was published on 2025-03-29.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The vulnerability directly inserts sensitive credentials into log files (CWE-532), enabling adversaries to discover and access unsecured credentials stored in files on the local system.