CVE-2024-28766

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.

CVSS v3 2.4 LOW

2.4^/10

CVSS v3 : LOW

Vector :

Exploitability : 0.9 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7161444	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_directory_integrator:7.2.0:::::::*
	cpe:2.3:a:ibm:security_verify_directory_integrator:10.0.0:::::::*

History

14 Jul 2025, 18:46

Type	Values Removed	Values Added
CPE		cpe:2.3:a:ibm:security_directory_integrator:7.2.0:::::::* cpe:2.3:a:ibm:security_verify_directory_integrator:10.0.0:::::::*
First Time		Ibm security Verify Directory Integrator Ibm security Directory Integrator Ibm
Summary		(es) IBM Security Directory Integrator 7.2.0 e IBM Security Verify Directory Integrator 10.0.0 podrían revelar información confidencial sobre el contenido del directorio que podría ayudar en futuros ataques contra sistema.
References	~~() https://www.ibm.com/support/pages/node/7161444 -~~	() https://www.ibm.com/support/pages/node/7161444 - Vendor Advisory

27 Jan 2025, 02:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-27 02:15

Updated : 2025-07-14 18:46

NVD link : CVE-2024-28766

Mitre link : CVE-2024-28766

CVE.ORG link : CVE-2024-28766

JSON object : View

Products Affected

ibm

security_directory_integrator
security_verify_directory_integrator

CWE

CWE-548

Exposure of Information Through Directory Listing

{"id": "CVE-2024-28766", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-01-27T02:15:28.253", "references": [{"url": "https://www.ibm.com/support/pages/node/7161444", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-548"}]}], "descriptions": [{"lang": "en", "value": "IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system."}, {"lang": "es", "value": "IBM Security Directory Integrator 7.2.0 e IBM Security Verify Directory Integrator 10.0.0 podr\u00edan revelar informaci\u00f3n confidencial sobre el contenido del directorio que podr\u00eda ayudar en futuros ataques contra sistema. "}], "lastModified": "2025-07-14T18:46:54.047", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_directory_integrator:7.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65A1A95C-1687-4304-88C5-1BEB58BBC8DF"}, {"criteria": "cpe:2.3:a:ibm:security_verify_directory_integrator:10.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76B2C187-CEC8-4991-94E2-058B6584A40A"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}