Lucene search

IbmCVELIST:CVE-2024-27257

HistorySep 10, 2024 - 2:24 p.m.

CVE-2024-27257 IBM OpenPages information disclosure

2024-09-1014:24:20

CWE-540

ibm

www.cve.org

ibm openpages

information disclosure

javascript source maps

unauthorized access

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

14.7%

JSON

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:openpages_with_watson:8.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:openpages_with_watson:9.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "OpenPages",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.3, 9.0"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/283966

www.ibm.com/support/pages/node/7167702

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

14.7%

JSON

Related for CVELIST:CVE-2024-27257