CVE-2024-39737

CWE-2093 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 76.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Datacap NavigatorIBM Datacap
Timeline
PublishedJul 15

Description

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 296004.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

▶CVEListV5ibm/datacap_navigator9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9
▶NVDibm/datacap5 versions+4

🔴Vulnerability Details

2
CVEList
IBM Datacap Navigator information disclosure↗2024-07-15
▶
GHSA
GHSA-84m4-gh52-5mhj: IBM Datacap Navigator 9↗2024-07-15
▶
CVE-2024-39737 (MEDIUM CVSS 5.3) | IBM Datacap Navigator 9.1.5 | cvebase.io