THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-31878

IBM i information disclosure

Assigner:ibm (9a959283-ebb5-44b6-b705-dcc2bbced522)
Reserved:2024-04-07
Published:2024-06-07
Updated:2024-06-07

Description

IBM i 7.2, 7.3, 7.4, and 7.5 Service Tools Server (SST) is vulnerable to SST user enumeration by a remote attacker. This vulnerability can be used by a malicious actor to gather information about SST users that can be targeted in further attacks. IBM X-Force ID: 287538.



MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-203 Observable Discrepancy

Product status

Default status
unaffected

7.2, 7.3, 7.4, 7.5
affected

References

https://www.ibm.com/support/pages/node/7156725 vendor-advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/287538 vdb-entry

cve.org CVE-2024-31878

nvd.nist.gov CVE-2024-31878

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-31878