CVE-2021-20371

Medium

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is…

ibm·CWE-209·Published 2021-06-02

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

254 chars

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.

NVDen

254 chars

NVDes

277 chars

Los productos IBM Jazz Foundation e IBM Engineering podrían permitir a un atacante remoto obtener información confidencial cuando un mensaje de error es devuelto en el navegador. Esta información podría ser usada en posteriores ataques contra el sistema. IBM X-Force ID: 195516

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.0	Primary	cve.org	4.3	—	—	CVSS:3.0/PR:L/AV:N/I:N/UI:N/A:N/AC:L/S:U/C:L/RC:C/E:U/RL:O