Skip to content
OpenAdvisories
Medium WID-SEC-2024-3321 2 CVEs

IBM TXSeries: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Oct 31, 2024 · Updated Oct 31, 2024 · de-DE

Vendor: IBM Product: TXSeries Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM TXSeries ausnutzen, um Informationen offenzulegen.

Product

IBM TXSeries ist eine Umgebung für "Online Transaction Processing (OLTP)".

Vulnerabilities 2

  • Medium 5.9
    CVE-2024-41738

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.

    IBM TXSeries for Multiplatforms
  • Medium 5.3
    CVE-2024-41741

    IBM TXSeries for Multiplatforms information disclosure

    IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing discrepancy which could be used in further attacks against the system.

    IBM TXSeries for Multiplatforms

Revision history

  1. #1

    Initiale Fassung

References