Lucene search

IbmCVELIST:CVE-2024-39751

HistoryAug 06, 2024 - 3:17 p.m.

CVE-2024-39751 IBM InfoSphere Information Server information disclosure

2024-08-0615:17:37

CWE-209

ibm

www.cve.org

ibm

infosphere

information server

11.7

remote

information disclosure

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

14.7%

JSON

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 297429

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "InfoSphere Information Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.7"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/297429

www.ibm.com/support/pages/node/7160580

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

14.7%

JSON

Related for CVELIST:CVE-2024-39751