PT-2021-12220
CVE-2020-4897
·
تاريخ النشر
2021-01-07
·
تاريخ التحديث
2021-01-13
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Emptoris Contract Management and IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3
Description
A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks against the system.
Recommendations
For versions 10.1.0 through 10.1.3, consider disabling the display of detailed technical error messages in the browser as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾