Datacap Navigator Data at Risk Due to Temporary Storage of Sensitive Data
CVE-2024-39732

7.5HIGH

Key Information:

Vendor
IBM
Status
Datacap Navigator
Vendor
CVE Published:
14 July 2024

Summary

IBM Datacap Navigator versions 9.1.5 through 9.1.9 are susceptible to a vulnerability that arises from the temporary storage of sensitive data across different environments. This data may potentially be exploited by malicious users seeking unauthorized access, posing significant risks to data integrity and confidentiality. Organizations utilizing the affected versions should prioritize a review of their security posture and apply necessary mitigations to safeguard their information assets. IBM X-Force ID: 295791 provides additional context on this vulnerability.

Affected Version(s)

Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9

References

https://www.ibm.com/support/pages/node/7160185
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/295791
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.