CVE-2026-7365

HIGH

IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

Title source: cna
STIX 2.1

Description

IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7272268

Scores

CVSS v3 8.4
EPSS 0.0012
EPSS Percentile 2.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-1392
Status published
Products (22)
IBM/Operations Analytics - Log Analysis 1.3.2.0
IBM/Operations Analytics - Log Analysis 1.3.3.0
IBM/Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3
IBM/Operations Analytics - Log Analysis 1.3.6.0, 1.3.6.1
IBM/Operations Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2
IBM/Operations Analytics - Log Analysis 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4
ibm/operations_analytics_log_analysis 1.3.2.0
ibm/operations_analytics_log_analysis 1.3.3.0
ibm/operations_analytics_log_analysis 1.3.5.0
ibm/operations_analytics_log_analysis 1.3.5.1
... and 12 more
Published May 27, 2026
Tracked Since May 27, 2026