CVE-2024-39740CWE-497
IBM Datacap Navigator information disclosure
Medium · published July 15, 2024
What it is
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information for future attacks against the system. IBM X-Force ID: 296009.
The record
Technical detail
- CVSS v3.1
- 4.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00371 · 29.8th percentile
- Weakness
- CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
- Published
- 2024-07-15T02:11Z
EPSS history
Timeline