CVE-2024-31898CWE-639

IBM InfoSphere Information Server data modification

Medium · published June 30, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references. IBM X-Force ID: 288182.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-06-30T18:01Z
EPSS history
Timeline
  • 30 JUN 18:01Z
    IBM InfoSphere Information Server data modification
    cvelistv5