CVE-2024-41738CWE-598
IBM TXSeries for Multiplatforms information disclosure
Medium · published November 1, 2024
What it is
IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00344 · 26.7th percentile
- Weakness
- CWE-598 · Use of HTTP Request With Sensitive Query String
- Published
- 2024-11-01T16:36Z
EPSS history
Timeline