CVE-2024-39729

July 15, 2024, 1 p.m.

4.3
Medium

Description

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system. IBM X-Force ID: 295968.

Product(s) Impacted

Product Versions
IBM Datacap Navigator
  • ['9.1.5', '9.1.6', '9.1.7', '9.1.8', '9.1.9']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-540
Inclusion of Sensitive Information in Source Code
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/295968
https://www.ibm.com/support/pages/node/7160185

Tags

psirt@us.ibm.com
CWE-540
2024-07-15
CVE-2024-39729

CVSS Score

4.3 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: LOW
  • Integrity Impact: NONE
  • Availability Impact: NONE

    • CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

    View Vector String

Timeline

Published: July 15, 2024, 3:15 a.m.
Last Modified: July 15, 2024, 1 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@us.ibm.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.