Information Disclosure Vulnerability in IBM Emptoris Contract Management
CVE-2018-1961
5.3MEDIUM
Summary
An information disclosure vulnerability exists in IBM Emptoris Contract Management that could allow attackers to gain access to sensitive information. This issue arises from detailed information being revealed in error messages. Affected versions include IBM Emptoris Contract Management 10.0.0 and 10.1.3.0. It is crucial for organizations using these versions to apply recommended security measures to mitigate the risk of unauthorized access to sensitive data.
Affected Version(s)
Emptoris Contract Management 10.0.0
Emptoris Contract Management 10.1.3
Emptoris Contract Management 10.1.3.0
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved