Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gph8-h9xc-35r4

Опубликовано: 24 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information they are authorized to but not while using this interface. By performing an SQL injection an attacker could see user profile attributes through this interface. IBM X-Force ID: 239305.

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information they are authorized to but not while using this interface. By performing an SQL injection an attacker could see user profile attributes through this interface. IBM X-Force ID: 239305.

EPSS

Процентиль: 39%
0.00177
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 4.3
nvd
около 3 лет назад

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information they are authorized to but not while using this interface. By performing an SQL injection an attacker could see user profile attributes through this interface. IBM X-Force ID: 239305.

EPSS

Процентиль: 39%
0.00177
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-89