CVE-2024-40706

Katalog CVE

CVSS 4.3 · Medium EPSS 0,38%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada ibm infosphere information server. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system.

Rincian

Terbit di NVD

24 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7169826 advisory vendor