Lucene search

IbmCVELIST:CVE-2024-39739

HistoryJul 15, 2024 - 1:25 a.m.

CVE-2024-39739 IBM Datacap Navigator server-side request forgery

2024-07-1501:25:48

CWE-918

ibm

www.cve.org

ibm datacap navigator

server-side request forgery

vulnerability

network enumeration

authenticated attacker

unauthorized requests

system security

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

Percentile

13.5%

JSON

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 296008.

CNA Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:datacap:9.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:datacap:9.1.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:datacap:9.1.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:datacap:9.1.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:datacap:9.1.9:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Datacap Navigator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/296008

www.ibm.com/support/pages/node/7160185

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

Percentile

13.5%

JSON

Related for CVELIST:CVE-2024-39739