CVE-2020-4897

Published: Jan 7, 2021Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190988.

Affected (6)

Products: Ibm: Emptoris Contract Management, Emptoris Spend Analysis

Ibm

2 products

Emptoris Contract Management

Emptoris Spend Analysis

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Emptoris Contract Management	From 10.1.0.0 to 10.1.0.38
Ibm Emptoris Contract Management	From 10.1.1.0 to 10.1.1.35
Ibm Emptoris Contract Management	From 10.1.3.0 to 10.1.3.30

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Emptoris Spend Analysis	From 10.1.0.0 to 10.1.0.38
Ibm Emptoris Spend Analysis	From 10.1.1.0 to 10.1.1.35
Ibm Emptoris Spend Analysis	From 10.1.3.0 to 10.1.3.30