CVE-2024-28766 - Vulnerability Details - OpenCVE

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ibm	Security Directory Integrator

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7161444

History

Wed, 12 Feb 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 27 Jan 2025 01:30:00 +0000

Type	Values Removed	Values Added
Description		IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.
Title		IBM Security Directory Integrator information disclosure
First Time appeared		Ibm Ibm security Directory Integrator
Weaknesses		CWE-548
CPEs		cpe:2.3:a:ibm:security_directory_integrator:10.0.0:::::::* cpe:2.3:a:ibm:security_directory_integrator:7.2.0:::::::*
Vendors & Products		Ibm Ibm security Directory Integrator
References		https://www.ibm.com/support/pages/node/7161444
Metrics		cvssV3_1 `{'score': 2.4, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2025-01-27T01:14:42.274Z

Updated: 2025-02-12T20:41:32.572Z

Reserved: 2024-03-10T12:22:43.138Z

Link: CVE-2024-28766

Vulnrichment

Updated: 2025-02-12T20:36:52.727Z

NVD

Status : Received

Published: 2025-01-27T02:15:28.253

Modified: 2025-01-27T02:15:28.253

Link: CVE-2024-28766

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-28766", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-03-10T12:22:43.138Z", "datePublished": "2025-01-27T01:14:42.274Z", "dateUpdated": "2025-02-12T20:41:32.572Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:ibm:security_directory_integrator:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_directory_integrator:10.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Security Directory Integrator", "vendor": "IBM", "versions": [{"status": "affected", "version": "7.2.0"}]}, {"defaultStatus": "unaffected", "product": "Security Verify Directory Integrator", "vendor": "IBM", "versions": [{"status": "affected", "version": "10.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system."}], "value": "IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-548", "description": "CWE-548 Exposure of Information Through Directory Listing", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-01-27T01:14:42.274Z"}, "references": [{"url": "https://www.ibm.com/support/pages/node/7161444"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Security Directory Integrator information disclosure", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-28766", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-27T14:25:30.504687Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T20:41:32.572Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-28766", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-27T14:25:30.504687Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T20:36:52.727Z"}}], "cna": {"title": "IBM Security Directory Integrator information disclosure", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:security_directory_integrator:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:security_directory_integrator:10.0.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Security Directory Integrator", "versions": [{"status": "affected", "version": "7.2.0"}], "defaultStatus": "unaffected"}, {"vendor": "IBM", "product": "Security Verify Directory Integrator", "versions": [{"status": "affected", "version": "10.0.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/7161444"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.", "supportingMedia": [{"type": "text/html", "value": "IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive information about directory contents that could aid in further attacks against the system.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-548", "description": "CWE-548 Exposure of Information Through Directory Listing"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2025-01-27T01:14:42.274Z"}}}, "cveMetadata": {"cveId": "CVE-2024-28766", "state": "PUBLISHED", "dateUpdated": "2025-02-12T20:41:32.572Z", "dateReserved": "2024-03-10T12:22:43.138Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2025-01-27T01:14:42.274Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}