Information Disclosure Vulnerability in IBM InfoSphere Information Server
CVE-2024-39751

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Infosphere Information Server
Vendor
CVE Published:
6 August 2024

Summary

IBM InfoSphere Information Server 11.7 presents a vulnerability that allows remote attackers to gain unauthorized access to sensitive information through detailed technical error messages returned in the browser. These messages can inadvertently disclose critical system information, potentially facilitating further targeted attacks on the system. Organizations using this software should review their configurations and error handling processes to mitigate exposure.

References

https://www.ibm.com/support/pages/node/7160580
https://exchange.xforce.ibmcloud.com/vulnerabilities/297429

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.