PT-2025-2404 · Ibm · Ibm Automation Decision Services

Publicado 2025-01-26 · Atualizado 2025-08-14 · CVE-2024-31906

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM Automation Decision Services version 23.0.2

Description: The issue is related to the disclosure of information through browser caching. This can allow an attacker to gain unauthorized access to protected information. The problem arises because web pages can be stored locally and read by another user on the system.

Recommendations: For IBM Automation Decision Services version 23.0.2, consider clearing browser cache regularly to minimize the risk of information disclosure. As a temporary workaround, restrict access to sensitive information on shared systems until a patch is available.

Correção

Enumeração de Fraquezas

CWE-525

Identificadores relacionados

BDU:2025-01213

CVE-2024-31906

Produtos afetados

Ibm Automation Decision Services

Referências · 9

• https://twitter.com/CVEnew/status/1883527886176432334 · Publicação no Twitter
• https://ibm.com/support/pages/node/7150662 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-01213 · Nota de Segurança
• https://t.me/cvenotify/108640 · Publicação no Telegram
• https://t.me/cvedetector/16418 · Publicação no Telegram
• https://t.me/cveNotify/132333 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2024-31906 · Aviso do Fabricante
• https://twitter.com/CVETracker/status/1883606017419661499 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-31906 · Nota de Segurança