CVE-2024-56495 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56495

IBM EntireX 11.1 contains an information-disclosure vulnerability: a local user can obtain sensitive data by triggering a detailed technical error message. The issue is documented under CVE-2024-56495 with a CVSS v3.1 base score of 3.3 (LOW) and an attack vector of LOCAL. The IBM Security Bulleti...