CVE-2024-40684
Medium · 5.9CVSS
5.9
EPSS
0.4%
Published
May 27, 2026
CISA due date
—
The record
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 IBM SmartCloud Analytics - Log Analysis does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85216 MISP contains an authentication bypass vulnerability in its LDAP and LinOTP… CWE-521
- CVE-2026-73778 A vulnerability exists in the Credential Manager component that may allow for… CWE-521
- CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size… CWE-521
- CVE-2026-11493 A weakness has been identified in Tenda AC15 15.03.05.19. CWE-521
- CVE-2026-9394 A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. CWE-521
- CVE-2026-41038 This vulnerability exists in Quantum Networks router due to lack of enforcement of strong… CWE-521
- CVE-2026-6284 An attacker with network access to the PLC is able to brute force discover passwords to… CWE-521
- CVE-2026-33771 A Weak Password Requirements vulnerability in the password management function of Juniper… CWE-521