CVE-2026-7365: IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

Synopsis

This is an authentication bypass vulnerability in IBM Operations Analytics - Log Analysis (and IBM SmartCloud Analytics - Log Analysis) caused by default passwords that are not forced to change after installation. According to the CVSS vector, the vulnerability is exploitable locally without any authentication, meaning an attacker who already has access to the host or installation environment can use well-known default credentials to bypass the product's authentication controls entirely. Successful exploitation gives the attacker full read, write, and availability impact over the affected system. No fix versions have been published; HarborGuard tracks this advisory and will make a patched-image rebuild available as soon as an upstream fix is released.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no over-the-network exposure is required to reach the vulnerable authentication path.

• AuthenticationNot required

  No prior credentials are needed; the vulnerability itself is the mechanism by which authentication is bypassed using default passwords.

• Victim interactionNot required

  No victim action is required; the attacker operates entirely without involving another user.

• Attack complexityDetail

  Exploitation is straightforward and condition-free; no race conditions or special environmental factors are required to reproduce the attack reliably.

Blast Radius

• A successful attacker reads all data accessible to the application, including stored log records, configuration data, and any credentials held by the service.
• The attacker can modify or delete persisted data within the Log Analysis system, including tampering with log records or altering application configuration.
• The attacker can disrupt or crash the affected service, causing loss of log ingestion and analytics availability for the host environment.