PT-2019-17104 · Ibm · Ibm Emptoris Spend Analysis+2
CVE-2019-4484
·
Publicado
2019-08-20
·
Atualizado
2022-12-02
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Emptoris Sourcing versions 10.1.0 through 10.1.3
IBM Contract Management versions 10.1.0 through 10.1.3
IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3
Description
The issue generates an error message that includes sensitive information, which could be used in further attacks against the system.
Recommendations
For IBM Emptoris Sourcing versions 10.1.0 through 10.1.3, update to a version that does not generate sensitive error messages.
For IBM Contract Management versions 10.1.0 through 10.1.3, update to a version that does not generate sensitive error messages.
For IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3, update to a version that does not generate sensitive error messages.
Correção
Generation of Error Message Containing Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Contract Management
Ibm Emptoris Sourcing
Ibm Emptoris Spend Analysis