CVE-2024-40684: IBM Operations Analytics - Log Analysis weak password requirements

CVE-2024-40684 · Severity: medium · CVSS 5.9 · Published 2026-05-27

IBM Operations Analytics - Log Analysis, a tool used for monitoring and analyzing IT infrastructure logs, contains a security weakness in its default login settings. The system does not enforce strong password requirements or adequate account lockout protections, making it easier for unauthorized individuals to guess user credentials. If exploited, an attacker could gain access to sensitive log data and operational insights, potentially compromising the security of the monitored environment.

Technologies: IBM Operations Analytics - Log Analysis. Vendors: IBM.

Quick answers

Is CVE-2024-40684 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2024-40684 being exploited in the wild.
How severe is CVE-2024-40684?
Medium severity, with a CVSS score of 5.9, published 27 May 2026.
Which products and versions are affected?
IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4.
Is there a fix for CVE-2024-40684?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-40684 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2024-40684?
Check whether you run IBM Operations Analytics - Log Analysis at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

IBM Operations Analytics - Log Analysis is vulnerable to improper authentication due to weak password requirements (CWE-521) and inadequate account lockout mechanisms in its Backend Authentication and Session Management module. The vulnerability exists when using the default database-managed custom user registry. While the attack complexity is rated as high, a remote attacker can exploit these weak defaults to perform brute-force or credential-guessing attacks to gain unauthorized access to user accounts. No official patch is currently available; however, IBM recommends migrating to an LDAP user registry to enforce more robust authentication policies.

Affected products

  • IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4

Timeline

  • 2026-04-03: advisory: Initial IBM security bulletin published
  • 2026-05-27: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.