PT-2025-2643 · Ibm · Ibm Openpages

Published 2025-01-09 · Updated 2025-06-20 · CVE-2024-43176

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM OpenPages version 9.0

Description The issue allows an authenticated user to obtain sensitive information, such as configurations that should only be available to privileged users.

Recommendations For IBM OpenPages version 9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

CWE-282

Related Identifiers

CVE-2024-43176

Affected Products

Ibm Openpages

References · 7

• https://osv.dev/vulnerability/CVE-2024-43176 · Vendor Advisory
• https://ibm.com/support/pages/node/7174640 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43176 · Security Note
• https://t.me/cvedetector/14847 · Telegram Post
• https://twitter.com/CVEnew/status/1877362919215870257 · Twitter Post
• https://t.me/cvenotify/126296 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1877407700553789673 · Twitter Post