CVE-2026-7365

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7365", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-04-28T20:46:39.086Z", "datePublished": "2026-05-27T13:55:22.608Z", "dateUpdated": "2026-05-27T14:52:38.627Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-05-27T13:55:22.608Z"}, "title": "IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1392", "description": "CWE-1392 Use of Default Credentials", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Operations Analytics - Log Analysis", "versions": [{"status": "affected", "version": "1.3.2.0"}, {"status": "affected", "version": "1.3.3.0"}, {"status": "affected", "version": "1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3"}, {"status": "affected", "version": "1.3.6.0, 1.3.6.1"}, {"status": "affected", "version": "1.3.7.0, 1.3.7.1, 1.3.7.2"}, {"status": "affected", "version": "1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4"}], "cpes": ["cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.7.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.8.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Operations Analytics - Log Analysis\u00a0 and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Operations Analytics - Log Analysis&nbsp; and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7272268", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "Principal Product and Version(s)Fix detailsIBM Operations Analytics - Log Analysis version 1.3.2.0, 1.3.3.0, 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.6.2, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4IBM strongly recommends addressing the vulnerability now by resetting the password through the GUI or integrating IBM Operations Analytics - Log Analysis with LDAP. Refer to Provision for Updating Default Password During Installation - IBM Operations Analytics Log Analysis for the instructions.For Log Analysis before 1.3.7.0, upgrade to 1.3.7-TIV-IOALA-FP_signed or later before applying this.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><table><colgroup><col/><col/></colgroup><tbody><tr><td>Principal Product and Version(s)</td><td>Fix details</td></tr><tr><td>IBM Operations Analytics - Log Analysis version 1.3.2.0, 1.3.3.0, 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.6.2, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4</td><td>IBM strongly recommends addressing the vulnerability now by resetting the password through the GUI or integrating IBM Operations Analytics - Log Analysis with LDAP. Refer to <a href=\"https://www.ibm.com/support/pages/node/7182994\" rel=\"noopener noreferrer nofollow\">Provision for Updating Default Password During Installation - IBM Operations Analytics Log Analysis</a> for the instructions.<br/><br/>For Log Analysis before 1.3.7.0, <a href=\"https://www.ibm.com/support/pages/node/1135125\" rel=\"noopener noreferrer nofollow\">upgrade</a> to <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Operations%20Analytics&amp;product=ibm/Tivoli/IBM+SmartCloud+Analytics+-+Log+Analysis&amp;release=1.3.6&amp;platform=All&amp;function=all\" rel=\"noopener noreferrer nofollow\">1.3.7-TIV-IOALA-FP_signed</a> or later before applying this.</td></tr></tbody></table></div>"}]}], "x_generator": {"engine": "ibm-cvegen"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-27T14:51:48.386177Z", "id": "CVE-2026-7365", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-27T14:52:38.627Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7365", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-27T14:51:48.386177Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-27T14:52:26.466Z"}}], "cna": {"title": "IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.7.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.8.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Operations Analytics - Log Analysis", "versions": [{"status": "affected", "version": "1.3.2.0"}, {"status": "affected", "version": "1.3.3.0"}, {"status": "affected", "version": "1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3"}, {"status": "affected", "version": "1.3.6.0, 1.3.6.1"}, {"status": "affected", "version": "1.3.7.0, 1.3.7.1, 1.3.7.2"}, {"status": "affected", "version": "1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4"}]}], "solutions": [{"lang": "en", "value": "Principal Product and Version(s)Fix detailsIBM Operations Analytics - Log Analysis version 1.3.2.0, 1.3.3.0, 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.6.2, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4IBM strongly recommends addressing the vulnerability now by resetting the password through the GUI or integrating IBM Operations Analytics - Log Analysis with LDAP. Refer to Provision for Updating Default Password During Installation - IBM Operations Analytics Log Analysis for the instructions.For Log Analysis before 1.3.7.0, upgrade to 1.3.7-TIV-IOALA-FP_signed or later before applying this.", "supportingMedia": [{"type": "text/html", "value": "<div><table><colgroup><col/><col/></colgroup><tbody><tr><td>Principal Product and Version(s)</td><td>Fix details</td></tr><tr><td>IBM Operations Analytics - Log Analysis version 1.3.2.0, 1.3.3.0, 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.6.2, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4</td><td>IBM strongly recommends addressing the vulnerability now by resetting the password through the GUI or integrating IBM Operations Analytics - Log Analysis with LDAP. Refer to <a href=\"https://www.ibm.com/support/pages/node/7182994\" rel=\"noopener noreferrer nofollow\">Provision for Updating Default Password During Installation - IBM Operations Analytics Log Analysis</a> for the instructions.<br/><br/>For Log Analysis before 1.3.7.0, <a href=\"https://www.ibm.com/support/pages/node/1135125\" rel=\"noopener noreferrer nofollow\">upgrade</a> to <a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Operations%20Analytics&amp;product=ibm/Tivoli/IBM+SmartCloud+Analytics+-+Log+Analysis&amp;release=1.3.6&amp;platform=All&amp;function=all\" rel=\"noopener noreferrer nofollow\">1.3.7-TIV-IOALA-FP_signed</a> or later before applying this.</td></tr></tbody></table></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7272268", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Operations Analytics - Log Analysis\u00a0 and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Operations Analytics - Log Analysis&nbsp; and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1392", "description": "CWE-1392 Use of Default Credentials"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-05-27T13:55:22.608Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7365", "state": "PUBLISHED", "dateUpdated": "2026-05-27T14:52:38.627Z", "dateReserved": "2026-04-28T20:46:39.086Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-05-27T13:55:22.608Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.5.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.7.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:operations_analytics___log_analysis:1.3.8.0:*:*:*:*:*:*:*"], "product": "Operations Analytics - Log Analysis", "vendor": "IBM", "versions": [{"status": "affected", "version": "1.3.2.0"}, {"status": "affected", "version": "1.3.3.0"}, {"status": "affected", "version": "1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3"}, {"status": "affected", "version": "1.3.6.0, 1.3.6.1"}, {"status": "affected", "version": "1.3.7.0, 1.3.7.1, 1.3.7.2"}, {"status": "affected", "version": "1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "43CCEBFA-728D-4201-8593-FE5C7CE53277", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "6D5294D7-1BFB-4B62-8515-CAA26C590FCA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "B72AC758-E3A0-4746-ADC6-CDB1D3A4FCBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "5372705B-6A20-4AF8-9672-FC9F1816EB22", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "DF6B60C6-724F-454E-A1AC-9AAD500682E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "7B5CAF78-5D22-4EF8-B0EC-29B7259512E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "F748C8F7-B421-4827-8476-EDFB25CBBDE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "1AF78185-2481-4AC0-A093-13921FE82280", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "624CA7BB-7D7B-4945-B077-A3035F955F58", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "A012A4A3-59C0-46C0-A3C1-0F6886066023", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "7B43090E-FDAF-4B45-8C07-AF87CFFB929C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "60642398-461C-4868-A801-EFB689ACDEA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "487A6CCB-060B-495A-B501-560DFF8E7D41", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "EEF4D476-A6E7-4626-BA85-A54816FF6C6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "E092DA77-76EA-4936-AEC8-2D847FAA415E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:operations_analytics_log_analysis:1.3.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "9BA61279-8EC7-4482-8522-1B3591C4EBB2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Operations Analytics - Log Analysis\u00a0 and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication."}, {"lang": "es", "value": "IBM Operations Analytics - Log Analysis e IBM SmartCloud Analytics - Log Analysis utilizan contrase\u00f1as predeterminadas contrase\u00f1as predeterminadas del proceso de fabricaci\u00f3n para su uso durante el proceso de instalaci\u00f3n, lo que podr\u00eda permitir a un atacante eludir la autenticaci\u00f3n."}], "id": "CVE-2026-7365", "lastModified": "2026-10-26T11:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7365", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-27T14:51:48.386177Z", "version": "2.0.3"}}]}, "published": "2026-05-27T14:17:35.280", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7272268"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1392"}], "source": "psirt@us.ibm.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.3.2.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.3.3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.3.6.0, 1.3.6.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.3.7.0, 1.3.7.1, 1.3.7.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Operations Analytics - Log Analysis", "source": "cna", "vendor": "IBM"}, "product": "operations_analytics_-_log_analysis", "vendor": "ibm"}], "created": "2026-05-27T20:00:05.925051+00:00", "updated": "2026-06-02T17:45:06.099136+00:00", "vendors": ["ibm", "ibm$PRODUCT$operations_analytics_-_log_analysis"]}