CVE-2024-38327CWE-540

IBM Analytics Content Hub information disclosure

Medium · published July 10, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-540 · Inclusion of Sensitive Information in Source Code
Published
2025-07-10T14:14Z
EPSS history
Timeline
  • 10 JUL 14:14Z
    IBM Analytics Content Hub information disclosure
    cvelistv5