Information Disclosure Vulnerability in IBM Emptoris Contract Management
CVE-2018-1961

5.3MEDIUM

Key Information:

Vendor
IBM
Status
Emptoris Contract Management
Vendor
CVE Published:
29 April 2019

Summary

An information disclosure vulnerability exists in IBM Emptoris Contract Management that could allow attackers to gain access to sensitive information. This issue arises from detailed information being revealed in error messages. Affected versions include IBM Emptoris Contract Management 10.0.0 and 10.1.3.0. It is crucial for organizations using these versions to apply recommended security measures to mitigate the risk of unauthorized access to sensitive data.

Affected Version(s)

Emptoris Contract Management 10.0.0

Emptoris Contract Management 10.1.3

Emptoris Contract Management 10.1.3.0

References

https://www.ibm.com/support/docview.wss?uid=ibm10731107
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/153657
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.