CVEvulnerability
CVE-2019-4257
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-06-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-209
Description
IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.
Affected configurations
• ibm infosphere information analyzer 11.5
• ibm infosphere information analyzer 11.7
• ibm infosphere information governance catalog 11.5
• ibm infosphere information governance catalog 11.7
• ibm infosphere information server on cloud 11.5
• ibm infosphere information server on cloud 11.7
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159945 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10882478 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159945 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/docview.wss?uid=ibm10882478 Patch, Vendor Advisory