CVE-2024-27257

2024-09-1015:15:15

CWE-540

[email protected]

web.nvd.nist.gov

ibm openpages

client-side source code

javascript source maps

unauthorized users

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

Percentile

14.7%

JSON

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.

Affected configurations

Nvd

Node

ibmopenpages_grc_platformRange8.3–8.3.0.2

ibmopenpages_with_watsonRange9.0–9.0.0.3

VendorProductVersionCPE
ibmopenpages_grc_platform*cpe:2.3:a:ibm:openpages_grc_platform:*:*:*:*:*:*:*:*
ibmopenpages_with_watson*cpe:2.3:a:ibm:openpages_with_watson:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	openpages_grc_platform	*	cpe:2.3:a:ibm:openpages_grc_platform::::::::
ibm	openpages_with_watson	*	cpe:2.3:a:ibm:openpages_with_watson::::::::