Information Disclosure Vulnerability in IBM Tivoli Netcool Impact
CVE-2019-4570

3.7LOW

Key Information:

Vendor
IBM
Status
Tivoli Netcool Impact
Vendor
CVE Published:
22 November 2019

Summary

IBM Tivoli Netcool Impact versions 7.1.0 through 7.1.0.16 may expose sensitive information through error messages generated by the system. These error messages can inadvertently reveal details about the application's environment, user accounts, or associated data, posing a risk to data confidentiality. Organizations utilizing affected versions should consider implementing appropriate mitigations to prevent information leakage.

Affected Version(s)

Tivoli Netcool Impact 7.1.0

Tivoli Netcool Impact 7.1.0.16

References

https://www.ibm.com/support/pages/node/1110141
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/166720
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.