CVE-2024-45636 is a vulnerability in IBM Security QRadar EDR versions 3.12.0 through 3.12.24 where user credentials are stored in plaintext on the local system. This allows a local user with elevated privileges to read sensitive credential information directly from the system. The vulnerability is classified under CWE-256 (Plaintext Storage of a Password). The CVSS v3.1 base score is 4.1, reflecting a medium severity with local attack vector, high attack complexity, and requiring privileged access. No official patch or remediation level has been disclosed by IBM as of the published date.

The vulnerability exposes user credentials in plaintext to local privileged users, leading to a high confidentiality impact. This could allow unauthorized access to user accounts if the local system is compromised or accessed by an attacker with elevated privileges. There is no impact on integrity or availability. The attack complexity is high and requires local privileged access, limiting the scope of exploitation.

No official patch or remediation guidance is currently available from IBM. Organizations should monitor IBM advisories for updates. Until a fix is released, restrict local privileged access to trusted personnel only to reduce risk. Avoid storing or transmitting sensitive credentials in plaintext where possible. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.