# IBM Support

No results were found for your search query.

* * *

##### **Tips**

To return expected results, you can:

- **Reduce the number of search terms.** Each term you use focuses the search further.
- **Check your spelling.** A single misspelled or incorrectly typed term can change your result.
- **Try substituting synonyms for your original terms.** For example, instead of searching for "java classes", try "java training"
- **Did you search for an IBM acquired or sold product ?** If so, follow the appropriate link below to find the content you need.

Our apologies

Search results are not available at this time. Please try again later or use one of the other support options on this page.

# Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2024-23444)

### Security Bulletin

## Summary

IBM Security SOAR uses an older version of ElasticSearch that may be identified and exploited. An update has been released which addresses these issues. It is recommended upgrading to Version 51.0.4.0 or later of IBM Security SOAR.

## Vulnerability Details

**CVEID:** [CVE-2024-23444](https://exchange.xforce.ibmcloud.com/vulnerabilities/350321)

**DESCRIPTION:** Elastic Elasticsearch could allow a remote authenticated attacker to obtain sensitive information, caused by the storage of private key on disk unencrypted. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain private key information and use this information to launch further attacks against the affected system.

CVSS Base score: 4.9

CVSS Temporal Score: See: [https://exchange.xforce.ibmcloud.com/vulnerabilities/350321](https://exchange.xforce.ibmcloud.com/vulnerabilities/350321) for the current score.

CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)

## Affected Products and Versions

|     |     |
| --- | --- |
| **Affected Product(s)** | **Version(s)** |
| IBM Security SOAR | Earlier than 51.0.4.0 |

## Remediation/Fixes

**IBM encourages customers to update their systems promptly.**

Users must upgrade to v51.0.4.0 or higher of IBM SOAR in order to obtain a fix for this vulnerability.

You can upgrade the platform and apply the security updates by following the instructions in the " **Upgrade Procedure**" section in the [IBM Documentation](/content/docs/en/sqsp/51?topic=guide-upgrading-platform "IBM Documentation"/index.html)

## Workarounds and Mitigations

None

## Get Notified about Future Security Bulletins

Subscribe to [My Notifications](/content/support/pages/node/718119/index.html) to be notified of important product support alerts like this.

### References

[Complete CVSS v3 Guide](http://www.first.org/cvss/user-guide "Link resides outside of ibm.com")

[On-line Calculator v3](http://www.first.org/cvss/calculator/3.0 "Link resides outside of ibm.com")

## Change History

20 Nov 2024: Initial Publication

## Document Location

Worldwide

## Business Unit

{"code":"BU008","label":"Security"}

## Product

{"code":"SSDVCX","label":"IBM Resilient"}

## Platform

[{"code":"PF043","label":"Red Hat"}]

## Version

IBM Security SOAR

## Software version:

IBM Security SOAR

## Operating system(s):

Red Hat

## Document number:

7176609

## Modified date:

28 January 2025

## Initial Publish date:

20 November 2024

## UID

ibm17176609