« Volver al listado

CVE-2024-28765

Estado: AnalizadaMedia (5.3)—

IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Security Directory Integrator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-28765",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-28765",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-28T15:39:43.878591Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:sdi:7.2.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:sdi:7.2.0.14:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "SDI",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.0.14"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:a:ibm:security_directory_integrator:10.0.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:security_directory_integrator:10.0.0.2:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "Security Directory Integrator",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "10.0.0.2"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-05-27T14:16:40.600",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7268903",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-209"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system."
    }
  ],
  "lastModified": "2026-06-17T07:21:45.947",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_directory_integrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "700D0A1A-E6BA-43F9-AC1B-00C886825DCA",
              "versionEndExcluding": "7.2.0.15",
              "versionStartIncluding": "7.2.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_directory_integrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD3DA989-EA9D-4C1B-AEA1-7DDEFBBD17AB",
              "versionEndExcluding": "10.0.0.3",
              "versionStartIncluding": "10.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}