CVE-2024-41763: falha de média gravidade em IBM Engineering Lifecycle Optimization…
IBM Engineering Lifecycle Optimization - Publishing information disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.2%
IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · Engineering Lifecycle Optimization PublishingCVEs relacionadas — IBM Engineering Lifecycle Optimization…
No mesmo produto, das mais perigosas para as menos.
CVE-2021-39017MEDIUMCVE-2021-39017EPSS 0.9%CVE-2021-39019MEDIUMCVE-2021-39019EPSS 0.8%CVE-2021-39018MEDIUMCVE-2021-39018EPSS 0.7%CVE-2023-45188MEDIUMIBM Engineering Lifecycle Optimization Publishing file uploadEPSS 0.7%CVE-2024-41765MEDIUMIBM Engineering Lifecycle Optimization - Publishing directory traversalEPSS 0.6%CVE-2021-39016MEDIUMCVE-2021-39016EPSS 0.6%