Lucene search

IbmCVE-2024-39729

HistoryJul 15, 2024 - 3:15 a.m.

CVE-2024-39729

2024-07-1503:15:02

CWE-540

ibm

web.nvd.nist.gov

ibm datacap navigator

sensitive information

authenticated user

source code

x-force id

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

13.5%

JSON

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system. IBM X-Force ID: 295968.

Affected configurations

Nvd

Vulners

Node

ibmdatacapMatch9.1.5

ibmdatacapMatch9.1.6

ibmdatacapMatch9.1.7

ibmdatacapMatch9.1.8

ibmdatacapMatch9.1.9

ibmdatacap_navigator

VendorProductVersionCPE
ibmdatacap9.1.5cpe:2.3:a:ibm:datacap:9.1.5:*:*:*:*:*:*:*
ibmdatacap9.1.6cpe:2.3:a:ibm:datacap:9.1.6:*:*:*:*:*:*:*
ibmdatacap9.1.7cpe:2.3:a:ibm:datacap:9.1.7:*:*:*:*:*:*:*
ibmdatacap9.1.8cpe:2.3:a:ibm:datacap:9.1.8:*:*:*:*:*:*:*
ibmdatacap9.1.9cpe:2.3:a:ibm:datacap:9.1.9:*:*:*:*:*:*:*
ibmdatacap_navigator*cpe:2.3:a:ibm:datacap_navigator:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	datacap	9.1.5	cpe:2.3:a:ibm:datacap:9.1.5:::::::*
ibm	datacap	9.1.6	cpe:2.3:a:ibm:datacap:9.1.6:::::::*
ibm	datacap	9.1.7	cpe:2.3:a:ibm:datacap:9.1.7:::::::*
ibm	datacap	9.1.8	cpe:2.3:a:ibm:datacap:9.1.8:::::::*
ibm	datacap	9.1.9	cpe:2.3:a:ibm:datacap:9.1.9:::::::*
ibm	datacap_navigator	*	cpe:2.3:a:ibm:datacap_navigator::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Datacap Navigator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/295968

www.ibm.com/support/pages/node/7160185

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

13.5%

JSON

Related for CVE-2024-39729