CVE-2024-56496

Summary

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

Affected Software

VendorProductVersion RangeStatus
IBMEntireX11.1affected

Weaknesses

  • CWE-209: CWE-209

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References