CVE-2019-4257 : IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive inform

IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.

Published 2019-06-06 21:29:01

Updated 2023-02-03 20:40:33

Source IBM Corporation

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2019-4257

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 17 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-4257

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	IBM Corporation
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

References for CVE-2019-4257

https://www.ibm.com/support/docview.wss?uid=ibm10882478

IBM Security Bulletin: IBM InfoSphere Information Analyzer and Information Governance Catalog is affected by an Information Disclosure vulnerability
Patch;Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/159945

IBM InfoSphere Information Server information disclosure CVE-2019-4257 Vulnerability Report
VDB Entry;Vendor Advisory

Products affected by CVE-2019-4257

IBM » Infosphere Information Governance Catalog » Version: 11.5
cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.5:*:*:*:*:*:*:*
Matching versions
IBM » Infosphere Information Governance Catalog » Version: 11.7
cpe:2.3:a:ibm:infosphere_information_governance_catalog:11.7:*:*:*:*:*:*:*
Matching versions
IBM » Infosphere Information Server On Cloud » Version: 11.5
cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.5:*:*:*:*:*:*:*
Matching versions
IBM » Infosphere Information Server On Cloud » Version: 11.7
cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.7:*:*:*:*:*:*:*
Matching versions
IBM » Infosphere Information Analyzer » Version: 11.7
cpe:2.3:a:ibm:infosphere_information_analyzer:11.7:*:*:*:*:*:*:*
Matching versions
IBM » Infosphere Information Analyzer » Version: 11.5
cpe:2.3:a:ibm:infosphere_information_analyzer:11.5:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2019-4257

Exploit prediction scoring system (EPSS) score for CVE-2019-4257

CVSS scores for CVE-2019-4257

CWE ids for CVE-2019-4257

References for CVE-2019-4257

Products affected by CVE-2019-4257