{"id":"CVE-2019-4257","state":"PUBLISHED","title":"IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further att","description":"IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945.","publishedAt":"2019-06-06T20:45:19.306Z","updatedAt":"2024-09-17T03:34:10.731Z","severity":{"score":4.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/I:N/C:L/UI:N/A:N/S:U/PR:L/AC:L/AV:N/RC:C/E:U/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM InfoSphere Information Server"],"affected":[{"vendor":"IBM","product":"InfoSphere Information Server","versions":[{"version":"11.5","status":"affected"},{"version":"11.7","status":"affected"}]}],"references":["https://www.ibm.com/support/docview.wss?uid=ibm10882478","https://exchange.xforce.ibmcloud.com/vulnerabilities/159945"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:01.452Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/4xxx/CVE-2019-4257.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-4257","state":"PUBLISHED","datePublished":"2019-06-06T20:45:19.306Z","dateUpdated":"2024-09-17T03:34:10.731Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945."}],"affected":[{"vendor":"IBM","product":"InfoSphere Information Server","versions":[{"version":"11.5","status":"affected"},{"version":"11.7","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10882478","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/159945","name":"ibm-infosphere-cve20194257-info-disc (159945)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.8,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/I:N/C:L/UI:N/A:N/S:U/PR:L/AC:L/AV:N/RC:C/E:U/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-06-06T20:45:19.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-04-29T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-04-29T00:00:00","ID":"CVE-2019-4257","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"InfoSphere Information Server","version":{"version_data":[{"version_value":"11.5"},{"version_value":"11.7"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the system. IBM X-Force ID: 159945."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/docview.wss?uid=ibm10882478","refsource":"CONFIRM","title":"IBM Security Bulletin 882478 (InfoSphere Information Server)","url":"https://www.ibm.com/support/docview.wss?uid=ibm10882478"},{"name":"ibm-infosphere-cve20194257-info-disc (159945)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/159945"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10882478","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/159945","name":"ibm-infosphere-cve20194257-info-disc (159945)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:33:37.894Z"}}]}}}