Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-39725 EUVD-2024-37922GHSA-3835-4hmw-pgj9

IBM Engineering Lifecycle Optimization - Engineering Insights information disclosure

Published Dec 25, 2024 · Updated Dec 26, 2024 · Assigned by ibm

Description

IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM Engineering Insights 7.0.2, 7.0.3 —

References