IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis contain a vulnerability where default passwords embedded during manufacturing are used during installation. This use of default credentials (CWE-1392) can allow an attacker to bypass authentication controls. The vulnerability affects several versions from 1.3.2.0 to 1.3.8.4. The CVSS v3.1 base score is 8.4, with attack vector local, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation must be managed by the user.

Successful exploitation of this vulnerability could allow an attacker with local access to bypass authentication mechanisms by leveraging default passwords. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. The high CVSS score reflects the critical nature of the impact if exploited. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should ensure that default passwords are changed immediately after installation and restrict local access to trusted personnel only. Monitor IBM's security advisories for updates regarding patches or official mitigations.