Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-39739 EUVD-2024-38218GHSA-vr9c-hjjv-gh5h

IBM Datacap Navigator server-side request forgery

Published Jul 15, 2024 · Updated Aug 2, 2024 · Assigned by ibm

Description

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 296008.

Affected products

VendorProductAffectedFixed
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9 —

References