CVE-2024-28766

Published: Jan 27, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.

Affected (2)

Products: Ibm: Security Directory Integrator, Security Verify Directory Integrator

Ibm

2 products

Security Directory Integrator

Security Verify Directory Integrator

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Directory Integrator	Version 7.2.0
Ibm Security Verify Directory Integrator	Version 10.0.0

Related CWEs

CWE-548

Exposure of Information Through Directory Listing

A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.

References (1)

https://www.ibm.com/support/pages/node/7161444

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.