description: IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430.
problem types: Obtain Information
affected:
{
product: Security Identity Governance and Intelligence
vendor: IBM
versions:
status: affected, version: 5.2
status: affected, version: 5.2.1
status: affected, version: 5.2.2
status: affected, version: 5.2.2.1
status: affected, version: 5.2.3
status: affected, version: 5.2.3.1
status: affected, version: 5.2.3.2
status: affected, version: 5.2.4
status: affected, version: 5.2.4.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.8
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
version: 3.0
]