Remote Information Disclosure Vulnerability in IBM InfoSphere Information Server
CVE-2024-40706

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Infosphere Information Server
Vendor
CVE Published:
24 January 2025

Summary

IBM InfoSphere Information Server version 11.7 is susceptible to a vulnerability that allows remote users to access sensitive version information. This exposure may facilitate further targeted attacks against the system, emphasizing the need for immediate remediation and protective measures to secure sensitive data.

Affected Version(s)

InfoSphere Information Server 11.7

References

https://www.ibm.com/support/pages/node/7169826

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.