CVE-2024-49784: falha de média gravidade em IBM OpenPages with Watson
IBM OpenPages with Watson information disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.1%
IBM OpenPages with Watson 8.3 and 9.0
could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values they could exploit this weaker algorithm to use additional cryptographic methods to possibly extract the encrypted data.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · OpenPages with WatsonCVEs relacionadas — IBM OpenPages with Watson
No mesmo produto, das mais perigosas para as menos.
CVE-2021-29907HIGHCVE-2021-29907EPSS 1.5%CVE-2023-40683HIGHIBM OpenPages with Watson privilege escalationEPSS 0.7%CVE-2024-49780MEDIUMIBM OpenPages path traversalEPSS 0.6%CVE-2023-38738MEDIUMIBM OpenPages with Watson information disclosureEPSS 0.5%CVE-2024-49781HIGHIBM OpenPages XML external entity injectionEPSS 0.5%CVE-2024-35151MEDIUMIBM OpenPages information disclosureEPSS 0.4%