CVE-2025-2670

Katalog CVE

CVSS 4.3 · Medium EPSS 0,26%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada ibm openpages. Skor CVSS 3.1 4.3 (Medium) menurut us.ibm.com.

Deskripsi (NVD)

IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and internal state.

Rincian

Terbit di NVD

9 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber us.ibm.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7239153 advisory vendor