VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 20, 2019· Updated Sep 17, 2024

CVE-2019-4485

CVE-2019-4485

Description

IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069.

Affected products

6
  • IBM/Emptoris Contract Managementllm-fuzzy2 versions
    10.1.0 through 10.1.3+ 1 more
    • (no CPE)range: 10.1.0 through 10.1.3
    • (no CPE)range: 10.1.0
  • IBM/Emptoris Spend Analysisllm-fuzzy2 versions
    10.1.0 through 10.1.3+ 1 more
    • (no CPE)range: 10.1.0 through 10.1.3
    • (no CPE)range: 10.1.0
  • IBM/Emptoris Sourcingllm-fuzzy2 versions
    10.1.0 through 10.1.3+ 1 more
    • (no CPE)range: 10.1.0 through 10.1.3
    • (no CPE)range: 10.1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.