CVE-2024-40706

IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7169826	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*

OR	cpe:2.3:o:ibm:aix:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

11 Mar 2025, 17:58

Type	Values Removed	Values Added
Summary		(es) IBM InfoSphere Information Server 11.7 podría permitir que un usuario remoto obtenga información confidencial sobre la versión que podría ayudar en futuros ataques contra sistema.
First Time		Microsoft windows Ibm infosphere Information Server Microsoft Linux Ibm Ibm aix Linux linux Kernel
CPE		cpe:2.3:o:microsoft:windows:-:::::::* cpe:2.3:o:ibm:aix:-:::::::* cpe:2.3:a:ibm:infosphere_information_server:11.7:::::::* cpe:2.3:o:linux:linux_kernel:-:::::::*
References	~~() https://www.ibm.com/support/pages/node/7169826 -~~	() https://www.ibm.com/support/pages/node/7169826 - Vendor Advisory
CWE		NVD-CWE-Other

24 Jan 2025, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-24 16:15

Updated : 2025-03-11 17:58

NVD link : CVE-2024-40706

Mitre link : CVE-2024-40706

CVE.ORG link : CVE-2024-40706

JSON object : View

Products Affected

ibm

aix
infosphere_information_server

linux

linux_kernel

microsoft

windows

CWE

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

NVD-CWE-Other

{"id": "CVE-2024-40706", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-01-24T16:15:36.150", "references": [{"url": "https://www.ibm.com/support/pages/node/7169826", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-497"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system."}, {"lang": "es", "value": "IBM InfoSphere Information Server 11.7 podr\u00eda permitir que un usuario remoto obtenga informaci\u00f3n confidencial sobre la versi\u00f3n que podr\u00eda ayudar en futuros ataques contra sistema."}], "lastModified": "2025-03-11T17:58:30.353", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CED2F00-89E3-4BA9-A8FB-D43B308A59A8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}