CVE-2024-49782CWE-297

IBM OpenPages improper certificate validation

Medium · published February 20, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

IBM OpenPages with Watson 8.3 and 9.0

could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through email notifications generated by OpenPages or disrupt notification delivery.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.0th percentile
Weakness
CWE-297 · Improper Validation of Certificate with Host Mismatch
Published
2025-02-20T03:46Z
EPSS history
Timeline
  • 20 FEB 03:46Z
    IBM OpenPages improper certificate validation
    cvelistv5