Vulnerability-Lookup

FKIE_CVE-2026-7365

Vulnerability from fkie_nvd - Published: 2026-05-27 14:17 - Updated: 2026-06-02 15:40

Severity

8.4 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

References

	URL	Tags
	psirt@us.ibm.com	https://www.ibm.com/support/pages/node/7272268	Vendor Advisory

Impacted products

Vendor	Product	Version
ibm	operations_analytics_log_analysis	1.3.2.0
ibm	operations_analytics_log_analysis	1.3.3.0
ibm	operations_analytics_log_analysis	1.3.5.0
ibm	operations_analytics_log_analysis	1.3.5.1
ibm	operations_analytics_log_analysis	1.3.5.2
ibm	operations_analytics_log_analysis	1.3.5.3
ibm	operations_analytics_log_analysis	1.3.6.0
ibm	operations_analytics_log_analysis	1.3.6.1
ibm	operations_analytics_log_analysis	1.3.7.0
ibm	operations_analytics_log_analysis	1.3.7.1
ibm	operations_analytics_log_analysis	1.3.7.2
ibm	operations_analytics_log_analysis	1.3.8.0
ibm	operations_analytics_log_analysis	1.3.8.1
ibm	operations_analytics_log_analysis	1.3.8.2
ibm	operations_analytics_log_analysis	1.3.8.3
ibm	operations_analytics_log_analysis	1.3.8.4

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "43CCEBFA-728D-4201-8593-FE5C7CE53277",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D5294D7-1BFB-4B62-8515-CAA26C590FCA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B72AC758-E3A0-4746-ADC6-CDB1D3A4FCBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5372705B-6A20-4AF8-9672-FC9F1816EB22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF6B60C6-724F-454E-A1AC-9AAD500682E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B5CAF78-5D22-4EF8-B0EC-29B7259512E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F748C8F7-B421-4827-8476-EDFB25CBBDE4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AF78185-2481-4AC0-A093-13921FE82280",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "624CA7BB-7D7B-4945-B077-A3035F955F58",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A012A4A3-59C0-46C0-A3C1-0F6886066023",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B43090E-FDAF-4B45-8C07-AF87CFFB929C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "60642398-461C-4868-A801-EFB689ACDEA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "487A6CCB-060B-495A-B501-560DFF8E7D41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EEF4D476-A6E7-4626-BA85-A54816FF6C6E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E092DA77-76EA-4936-AEC8-2D847FAA415E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BA61279-8EC7-4482-8522-1B3591C4EBB2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Operations Analytics - Log Analysis\u00a0 and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication."
    }
  ],
  "id": "CVE-2026-7365",
  "lastModified": "2026-06-02T15:40:12.287",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.4,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.9,
        "source": "psirt@us.ibm.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2026-05-27T14:17:35.280",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.ibm.com/support/pages/node/7272268"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1392"
        }
      ],
      "source": "psirt@us.ibm.com",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2026-7365 (GCVE-0-2026-7365)

Vulnerability from cvelistv5 – Published: 2026-05-27 13:55 – Updated: 2026-05-27 14:52

Title

IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

Summary

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-1392 - Use of Default Credentials

Assigner

ibm

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7272268	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Operations Analytics - Log Analysis	Affected: 1.3.2.0 Affected: 1.3.3.0 Affected: 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3 Affected: 1.3.6.0, 1.3.6.1 Affected: 1.3.7.0, 1.3.7.1, 1.3.7.2 Affected: 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.2.0:::::::* cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.3.0:::::::* cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.5.0:::::::* cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.6.0:::::::* cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.7.0:::::::* cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.8.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-7365",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-27T14:51:48.386177Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-27T14:52:38.627Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.8.0:*:*:*:*:*:*:*"
          ],
          "product": "Operations Analytics - Log Analysis",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "1.3.2.0"
            },
            {
              "status": "affected",
              "version": "1.3.3.0"
            },
            {
              "status": "affected",
              "version": "1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3"
            },
            {
              "status": "affected",
              "version": "1.3.6.0, 1.3.6.1"
            },
            {
              "status": "affected",
              "version": "1.3.7.0, 1.3.7.1, 1.3.7.2"
            },
            {
              "status": "affected",
              "version": "1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Operations Analytics - Log Analysis\u0026nbsp; and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.\u003c/p\u003e"
            }
          ],
          "value": "IBM Operations Analytics - Log Analysis\u00a0 and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1392",
              "description": "CWE-1392 Use of Default Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T13:55:22.608Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7272268"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003ctable\u003e\u003ccolgroup\u003e\u003ccol/\u003e\u003ccol/\u003e\u003c/colgroup\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003ePrincipal Product and Version(s)\u003c/td\u003e\u003ctd\u003eFix details\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Operations Analytics - Log Analysis version 1.3.2.0, 1.3.3.0, 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.6.2, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4\u003c/td\u003e\u003ctd\u003eIBM strongly recommends addressing the vulnerability now by resetting the password through the GUI or integrating IBM Operations Analytics - Log Analysis with LDAP. Refer to \u003ca href=\"https://www.ibm.com/support/pages/node/7182994\" rel=\"noopener noreferrer nofollow\"\u003eProvision for Updating Default Password During Installation - IBM Operations Analytics Log Analysis\u003c/a\u003e for the instructions.\u003cbr/\u003e\u003cbr/\u003eFor Log Analysis before 1.3.7.0, \u003ca href=\"https://www.ibm.com/support/pages/node/1135125\" rel=\"noopener noreferrer nofollow\"\u003eupgrade\u003c/a\u003e to \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Operations%20Analytics\u0026amp;product=ibm/Tivoli/IBM+SmartCloud+Analytics+-+Log+Analysis\u0026amp;release=1.3.6\u0026amp;platform=All\u0026amp;function=all\" rel=\"noopener noreferrer nofollow\"\u003e1.3.7-TIV-IOALA-FP_signed\u003c/a\u003e or later before applying this.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "Principal Product and Version(s)Fix detailsIBM Operations Analytics - Log Analysis version 1.3.2.0, 1.3.3.0, 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.6.2, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4IBM strongly recommends addressing the vulnerability now by resetting the password through the GUI or integrating IBM Operations Analytics - Log Analysis with LDAP. Refer to Provision for Updating Default Password During Installation - IBM Operations Analytics Log Analysis for the instructions.For Log Analysis before 1.3.7.0, upgrade to 1.3.7-TIV-IOALA-FP_signed or later before applying this."
        }
      ],
      "title": "IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation",
      "x_generator": {
        "engine": "ibm-cvegen"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-7365",
    "datePublished": "2026-05-27T13:55:22.608Z",
    "dateReserved": "2026-04-28T20:46:39.086Z",
    "dateUpdated": "2026-05-27T14:52:38.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2026-7365

CVE-2026-7365 (GCVE-0-2026-7365)

Tags

Sightings

Nomenclature