Vulnerabilities > CVE-2024-31878 - Information Exposure Through Discrepancy vulnerability in IBM I

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ibm
CWE-203

Summary

IBM i 7.2, 7.3, 7.4, and 7.5 Service Tools Server (SST) is vulnerable to SST user enumeration by a remote attacker. This vulnerability can be used by a malicious actor to gather information about SST users that can be targeted in further attacks. IBM X-Force ID: 287538.

Vulnerable Configurations

Part Description Count
OS
Ibm
4

Common Weakness Enumeration (CWE)