THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-31878

IBM i information disclosure

Assigneribm
Reserved2024-04-07
Published2024-06-07
Updated2024-06-07

Description

IBM i 7.2, 7.3, 7.4, and 7.5 Service Tools Server (SST) is vulnerable to SST user enumeration by a remote attacker. This vulnerability can be used by a malicious actor to gather information about SST users that can be targeted in further attacks. IBM X-Force ID: 287538.



MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-203 Observable Discrepancy

Product status

Default status
unaffected

7.2, 7.3, 7.4, 7.5
affected

References

https://www.ibm.com/support/pages/node/7156725 vendor-advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/287538 vdb-entry

cve.org CVE-2024-31878

nvd.nist.gov CVE-2024-31878

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-31878
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
© Copyright 2024 THREATINT. Made in Cyprus with ❤ + ☼