description: IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164068.
problem types: Obtain Information
affected:
{
product: Contract Management
vendor: IBM
versions:
status: affected, version: 10.1.0
status: affected, version: 10.1.3
}
{
product: Emptoris Spend Analysis
vendor: IBM
versions:
status: affected, version: 10.1.0
status: affected, version: 10.1.3
}
{
product: Emptoris Sourcing
vendor: IBM
versions:
status: affected, version: 10.1.0
status: affected, version: 10.1.3
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.8
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/I:N/PR:L/UI:N/AV:N/S:U/AC:L/A:N/C:L/E:U/RL:O/RC:C
version: 3.0
]