Web Link Vulnerability in IBM Engineering Insights Product Line
CVE-2024-39727

9.8CRITICAL

Key Information:

Vendor
IBM
Status
Engineering Insights
Vendor
CVE Published:
25 December 2024

Summary

IBM Engineering Lifecycle Optimization - Engineering Insights versions 7.0.2 and 7.0.3 contain a significant vulnerability resulting from the use of web links with untrusted references to external sites. A remote attacker can exploit this issue to expose sensitive information or execute unauthorized actions through the victim's web browser. Organizations utilizing these affected versions should assess their security posture and take appropriate measures to mitigate potential risks.

Affected Version(s)

Engineering Insights 7.0.2, 7.0.3

References

https://www.ibm.com/support/pages/node/7176783

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.