Lucene search

K
cveIbmCVE-2015-0143
HistoryOct 03, 2015 - 10:59 p.m.

CVE-2015-0143

2015-10-0322:59:04
CWE-200
ibm
web.nvd.nist.gov
25
cve-2015-0143
ibm openpages
grc platform
sensitive information
error messages
security vulnerability
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

34.2%

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages.

Affected configurations

Nvd
Node
ibmopenpages_grc_platformMatch6.2.0.0
OR
ibmopenpages_grc_platformMatch6.2.1.0
OR
ibmopenpages_grc_platformMatch6.2.1.1
OR
ibmopenpages_grc_platformMatch7.0.0.0
OR
ibmopenpages_grc_platformMatch7.1.0.0
VendorProductVersionCPE
ibmopenpages_grc_platform6.2.0.0cpe:2.3:a:ibm:openpages_grc_platform:6.2.0.0:*:*:*:*:*:*:*
ibmopenpages_grc_platform6.2.1.0cpe:2.3:a:ibm:openpages_grc_platform:6.2.1.0:*:*:*:*:*:*:*
ibmopenpages_grc_platform6.2.1.1cpe:2.3:a:ibm:openpages_grc_platform:6.2.1.1:*:*:*:*:*:*:*
ibmopenpages_grc_platform7.0.0.0cpe:2.3:a:ibm:openpages_grc_platform:7.0.0.0:*:*:*:*:*:*:*
ibmopenpages_grc_platform7.1.0.0cpe:2.3:a:ibm:openpages_grc_platform:7.1.0.0:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

34.2%

Related for CVE-2015-0143