MEDIUM🇵🇱 Wersja polska

CVE-2024-35134

CVSS 5.3v3.1pub. 2025-01-25upd. 2025-07-25

IBM Analytics Content Hub 2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • IBM Analytics Content Hub

    APP
    Ibm
    2.0 – 2.3 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-39750HIGH8.8ten sam produkt

IBM Analytics Content Hub 2.0 is vulnerable to a buffer overflow due to improper return length checking. A rem...

CVE-2024-37524MEDIUM5.3ten sam produkt

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information...

CVE-2024-38327MEDIUM6.8ten sam produkt

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due...

CVE-2024-39752MEDIUM6.8ten sam produkt

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validatin...

CVE-2025-36090MEDIUM4.3ten sam produkt

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the...