CVE-2019-4308

CWE-2094 documents4 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 63.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
IBM Emptoris Contract ManagementIBM Emptoris SourcingIBM Emptoris Spend Analysis+1 more
Timeline
PublishedAug 20
Latest updateMay 24

Description

IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages6 packages

▶NVDibm/emptoris_spend_analysis10.1.0 — 10.1.3
▶NVDibm/emptoris_contract_management10.1.0 — 10.1.3
▶CVEListV5ibm/emptoris_spend_analysis10.1.0, 10.1.3+1
▶NVDibm/emptoris_sourcing10.1.0 — 10.1.3
▶CVEListV5ibm/emptoris_sourcing10.1.0, 10.1.3+1

🔴Vulnerability Details

3
GHSA
GHSA-9p6q-5m74-r2rr: IBM Emptoris Sourcing 10↗2022-05-24
▶
OSV
twisted vulnerabilities↗2020-03-30
▶
CVEList
CVE-2019-4308: IBM Emptoris Sourcing 10↗2019-08-20
▶