CVE-2024-49355
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature.
Affected (2)
Products: Ibm: Openpages With Watson
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 8.3 to 8.3.0.3 |
| Running on/with | Platform Versions |
|---|---|
Linux Linux Kernel | All versions |
Microsoft Windows | All versions |
Related CWEs
CWE-116
Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
CWE-117
Improper Output Neutralization for Logs
The product does not neutralize or incorrectly neutralizes output that is written to logs.
References (1)
Timeline
No history available yet.