CVE-2024-41763 MEDIUM

CVE-2024-41763: IBM Engineering Lifecycle Optimization - Publishing information disclosure

Vendor Ibm

Product Engineering Lifecycle Optimization Publishing

Weakness CWE-327 · Broken crypto

Published January 4, 2025

Last update January 6, 2025

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Key dates

02Disclosure timeline

January 4, 2025 CVE published

January 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-41763 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/327.html

Related vulnerabilities

Identifiers

CVE CVE-2024-41763

CWE CWE-327

CVSS 5.9 / MEDIUM

Affected versions