Information Disclosure Vulnerability in IBM Emptoris Contract Management
CVE-2018-1961

5.3MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
29 April 2019

Summary

An information disclosure vulnerability exists in IBM Emptoris Contract Management that could allow attackers to gain access to sensitive information. This issue arises from detailed information being revealed in error messages. Affected versions include IBM Emptoris Contract Management 10.0.0 and 10.1.3.0. It is crucial for organizations using these versions to apply recommended security measures to mitigate the risk of unauthorized access to sensitive data.

Affected Version(s)

Emptoris Contract Management 10.0.0

Emptoris Contract Management 10.1.3

Emptoris Contract Management 10.1.3.0

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.