Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-4897 EUVD-2020-26144GHSA-q7cq-6x2w-xg5f

IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensiti…

Published Jan 7, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190988.

Affected products

VendorProductAffectedFixed
IBM Emptoris Contract Management 10.1.0, 10.1.1, 10.1.3 —
IBM Emptoris Spend Analysis 10.1.0, 10.1.1, 10.1.3 —

References