Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crr7-h45x-f39h

Опубликовано: 24 нояб. 2021
Источник: github
Github: Не прошло ревью

Описание

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212786.

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212786.

EPSS

Процентиль: 38%
0.0017
Низкий

Дефекты

CWE-209

Связанные уязвимости

CVSS3: 5.3
nvd
около 4 лет назад

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212786.

EPSS

Процентиль: 38%
0.0017
Низкий

Дефекты

CWE-209