Web Link Vulnerability in IBM Engineering Insights Product Line
CVE-2024-39727

6.1MEDIUM

Key Information:

Vendor
IBM
Status
Engineering Insights
Vendor
CVE Published:
25 December 2024

Summary

IBM Engineering Lifecycle Optimization - Engineering Insights versions 7.0.2 and 7.0.3 contain a significant vulnerability resulting from the use of web links with untrusted references to external sites. A remote attacker can exploit this issue to expose sensitive information or execute unauthorized actions through the victim's web browser. Organizations utilizing these affected versions should assess their security posture and take appropriate measures to mitigate potential risks.

Affected Version(s)

Engineering Insights 7.0.2, 7.0.3

References

https://www.ibm.com/support/pages/node/7176783

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.