CVE-2024-43176CWE-282

IBM OpenPages information disclosure

Medium · published January 9, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privileged users.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-282 · Improper Ownership Management
Published
2025-01-09T14:03Z
EPSS history
Timeline
  • 09 JAN 14:03Z
    IBM OpenPages information disclosure
    cvelistv5