CVE-2024-39751

Aug. 6, 2024, 4:30 p.m.

Tags

psirt@us.ibm.com
CWE-209
2024-08-06
CVE-2024-39751

CVSS Score

4.3 / 10

Product(s) Impacted

IBM InfoSphere Information Server

  • 11.7

Description

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429

Weaknesses

CWE-209
Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

CWE ID: 209

Date

Published: Aug. 6, 2024, 4:15 p.m.

Last Modified: Aug. 6, 2024, 4:30 p.m.

Status : Undergoing Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

psirt@us.ibm.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

Base Score
4.3
Exploitability Score
2.8
Impact Score
1.4
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/297429
psirt@us.ibm.com
https://www.ibm.com/support/pages/node/7160580
psirt@us.ibm.com