IBM Support
No results were found for your search query.
Tips
To return expected results, you can:
- Reduce the number of search terms. Each term you use focuses the search further.
- Check your spelling. A single misspelled or incorrectly typed term can change your result.
- Try substituting synonyms for your original terms. For example, instead of searching for "java classes", try "java training"
- Did you search for an IBM acquired or sold product ? If so, follow the appropriate link below to find the content you need.
Our apologies
Search results are not available at this time. Please try again later or use one of the other support options on this page.
Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2024-23444)
Security Bulletin
Summary
IBM Security SOAR uses an older version of ElasticSearch that may be identified and exploited. An update has been released which addresses these issues. It is recommended upgrading to Version 51.0.4.0 or later of IBM Security SOAR.
Vulnerability Details
CVEID: CVE-2024-23444
DESCRIPTION: Elastic Elasticsearch could allow a remote authenticated attacker to obtain sensitive information, caused by the storage of private key on disk unencrypted. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain private key information and use this information to launch further attacks against the affected system.
CVSS Base score: 4.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/350321 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
| IBM Security SOAR | Earlier than 51.0.4.0 |
Remediation/Fixes
IBM encourages customers to update their systems promptly.
Users must upgrade to v51.0.4.0 or higher of IBM SOAR in order to obtain a fix for this vulnerability.
You can upgrade the platform and apply the security updates by following the instructions in the " Upgrade Procedure" section in the [IBM Documentation](/content/docs/en/sqsp/51?topic=guide-upgrading-platform "IBM Documentation"/index.html)
Workarounds and Mitigations
None
Get Notified about Future Security Bulletins
Subscribe to My Notifications to be notified of important product support alerts like this.
References
Change History
20 Nov 2024: Initial Publication
Document Location
Worldwide
Business Unit
{"code":"BU008","label":"Security"}
Product
{"code":"SSDVCX","label":"IBM Resilient"}
Platform
[{"code":"PF043","label":"Red Hat"}]
Version
IBM Security SOAR
Software version:
IBM Security SOAR
Operating system(s):
Red Hat
Document number:
7176609
Modified date:
28 January 2025
Initial Publish date:
20 November 2024
UID
ibm17176609