CVE-2024-41780 MEDIUM

CVE-2024-41780: IBM Jazz Foundation information disclosure

Vendor Ibm

Product Jazz Foundation

Weakness CWE-359

Published January 3, 2025

Last update January 3, 2025

View on NVD All CVEs

CVSS base score

4.2/10

Attack vector Physical

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could could allow a physical user to obtain sensitive information due to not masking passwords during entry.

Key dates

02Disclosure timeline

January 3, 2025 CVE published

January 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-41780 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/359.html

Related vulnerabilities

04Related CVE

CVE-2023-44213 CVE-2025-66172 Apache CloudStack: Any user can attach a volume in their VMs from backups they should not have access to CVE-2024-13216 HT Event – WordPress Event Manager Plugin for Elementor <= 1.4.7 - Authenticated (Contributor+) Sensitive Information Exposure via HT Event: Sponsor CVE-2024-30321 CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API