PT-2019-17029 · Ibm · Ibm Emptoris Spend Analysis+2
CVE-2019-4308
·
Publicado
2019-08-20
·
Atualizado
2023-01-31
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Emptoris Sourcing versions 10.1.0 through 10.1.3
IBM Contract Management versions 10.1.0 through 10.1.3
IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3
Description
The issue allows an authenticated user to obtain sensitive information from error messages.
Recommendations
For IBM Emptoris Sourcing versions 10.1.0 through 10.1.3, update to a version outside of this range to resolve the issue.
For IBM Contract Management versions 10.1.0 through 10.1.3, update to a version outside of this range to resolve the issue.
For IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3, update to a version outside of this range to resolve the issue.
Correção
Generation of Error Message Containing Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Contract Management
Ibm Emptoris Sourcing
Ibm Emptoris Spend Analysis