CVE-2019-4129

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Operations Center versions 7.1 through 8.1

Description The issue allows a remote attacker to obtain sensitive information due to an error message containing a stack trace. By creating an error with a stack trace, an attacker could exploit this to potentially obtain details on the Operations Center architecture.

Recommendations For versions 7.1 through 8.1, consider disabling the display of detailed error messages as a temporary workaround until a patch is available. Restrict access to error messages containing stack traces to minimize the risk of exploitation.