5.3

CVE-2024-56342

EPSS 0.15%
Veröffentlicht 06.06.2025 01:27:08
Zuletzt bearbeitet 20.08.2025 17:38:33
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM Verify Identity Access Digital Credentials information disclosure

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Verify Identity Access Digital Credentials Version24.06

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.349

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
psirt@us.ibm.com	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-209 Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

https://www.ibm.com/support/pages/node/7235710

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-56342

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-56342

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-56342

EUVD