Information Disclosure Vulnerability in IBM i2 Analyst's Notebook Premium

CVE-2021-29767

Summary

IBM i2 Analyst's Notebook Premium versions 9.2.0, 9.2.1, and 9.2.2 are susceptible to an information disclosure vulnerability that can enable remote attackers to gain access to sensitive data. This vulnerability arises when the application presents detailed technical error messages to users, potentially disclosing private information that could be leveraged for subsequent system attacks. To mitigate these risks, it's crucial to apply security updates promptly and implement error message handling measures.

References