{"id":"CVE-2024-39729","state":"PUBLISHED","title":"IBM Datacap Navigator information disclosure","description":"IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system.  IBM X-Force ID:  295968.","publishedAt":"2024-07-15T02:07:10.919Z","updatedAt":"2024-08-02T04:26:16.023Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Datacap Navigator"],"affected":[{"vendor":"IBM","product":"Datacap Navigator","defaultStatus":"unaffected","versions":[{"version":"9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/7160185","https://exchange.xforce.ibmcloud.com/vulnerabilities/295968"],"weaknesses":["CWE-540"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/39xxx/CVE-2024-39729.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-39729","state":"PUBLISHED","datePublished":"2024-07-15T02:07:10.919Z","dateUpdated":"2024-08-02T04:26:16.023Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2024-06-28T09:34:20.322Z"},"containers":{"cna":{"title":"IBM Datacap Navigator information disclosure","descriptions":[{"lang":"en","value":"IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system.  IBM X-Force ID:  295968."}],"affected":[{"vendor":"IBM","product":"Datacap Navigator","defaultStatus":"unaffected","versions":[{"version":"9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7160185","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/295968","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-540","description":"CWE-540 Information Exposure Through Source Code","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-07-15T02:07:10.919Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-15T13:26:05.167944Z","id":"CVE-2024-39729","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-15T13:26:18.985Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/7160185","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/295968","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T04:26:16.023Z"}}]}}}