CVE-2019-4257

CWE-2093 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 63.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
IBM Infosphere Information ServerIBM Infosphere Information AnalyzerIBM Infosphere Information Governance Catalog+1 more
Timeline
PublishedJun 6
Latest updateMay 24

Description

IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5ibm/infosphere_information_server11.5, 11.7+1
▶NVDibm/infosphere_information11.5, 11.7+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j654-gf62-fhpj: IBM InfoSphere Information Server 11↗2022-05-24
▶
CVEList
CVE-2019-4257: IBM InfoSphere Information Server 11↗2019-06-06
▶
CVE-2019-4257 (MEDIUM CVSS 4.3) | IBM InfoSphere Information Server 1 | cvebase.io