CVE-2020-4897

Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management and IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3

Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks against the system.

Recommendations For versions 10.1.0 through 10.1.3, consider disabling the display of detailed technical error messages in the browser as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.