Vulnerabilities > Password in Configuration File

DATE CVE VULNERABILITY TITLE RISK
2025-06-03 CVE-2025-25022 IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an unauthenticated user in the environment to obtain highly sensitive information in configuration files.
low complexity
CWE-260
critical
 9.6
9.6
2025-05-07 CVE-2025-33093 IBM Sterling Partner Engagement Manager 6.1.0, 6.2.0, 6.2.2 JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret.
network
low complexity
CWE-260
7.5
7.5