CVE-2022-34355 - IBM Jazz Foundation information disclosure

Back Back to CVE browser

MEDIUM

IBM Jazz Foundation information disclosure

Published Oct 6, 2023

5.5

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitive version information to a user that could be used in further attacks against the system. IBM X-Force ID: 230498.

Affected products

Vendor IBM Product Engineering Lifecycle Management Default
unaffected
- Version
  6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Engineering Lifecycle Management

unaffected

Version	Status	Constraints
6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37310
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/230498
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7046995
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37310		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/230498		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7046995		vendor-advisoryVendor Advisory