{"id":"CVE-2019-4485","state":"PUBLISHED","title":"IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that in","description":"IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069.","publishedAt":"2019-08-20T18:25:27.111Z","updatedAt":"2024-09-17T01:50:37.798Z","severity":{"score":4.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/UI:N/PR:L/I:N/S:U/AV:N/AC:L/C:L/A:N/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Contract Management","IBM Emptoris Spend Analysis","IBM Emptoris Sourcing"],"affected":[{"vendor":"IBM","product":"Contract Management","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.3","status":"affected"}]},{"vendor":"IBM","product":"Emptoris Spend Analysis","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.3","status":"affected"}]},{"vendor":"IBM","product":"Emptoris Sourcing","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.3","status":"affected"}]}],"references":["https://www.ibm.com/support/docview.wss?uid=ibm10880221","https://exchange.xforce.ibmcloud.com/vulnerabilities/164069"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:01.452Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/4xxx/CVE-2019-4485.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-4485","state":"PUBLISHED","datePublished":"2019-08-20T18:25:27.111Z","dateUpdated":"2024-09-17T01:50:37.798Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069."}],"affected":[{"vendor":"IBM","product":"Contract Management","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.3","status":"affected"}]},{"vendor":"IBM","product":"Emptoris Spend Analysis","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.3","status":"affected"}]},{"vendor":"IBM","product":"Emptoris Sourcing","versions":[{"version":"10.1.0","status":"affected"},{"version":"10.1.3","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10880221","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/164069","name":"ibm-emptoris-cve20194485-info-disc (164069)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.8,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/UI:N/PR:L/I:N/S:U/AV:N/AC:L/C:L/A:N/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-08-20T18:25:27.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-08-13T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-08-13T00:00:00","ID":"CVE-2019-4485","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Contract Management","version":{"version_data":[{"version_value":"10.1.0"},{"version_value":"10.1.3"}]}},{"product_name":"Emptoris Spend Analysis","version":{"version_data":[{"version_value":"10.1.0"},{"version_value":"10.1.3"}]}},{"product_name":"Emptoris Sourcing","version":{"version_data":[{"version_value":"10.1.0"},{"version_value":"10.1.3"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/docview.wss?uid=ibm10880221","refsource":"CONFIRM","title":"IBM Security Bulletin 880221 (Emptoris Sourcing)","url":"https://www.ibm.com/support/docview.wss?uid=ibm10880221"},{"name":"ibm-emptoris-cve20194485-info-disc (164069)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/164069"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10880221","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/164069","name":"ibm-emptoris-cve20194485-info-disc (164069)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:40:47.396Z"}}]}}}