PT-2025-29095 · Ibm · Ibm Analytics Content Hub

Published 2025-07-09 · Updated 2025-07-23 · CVE-2024-38327

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub versions 2.0 through 2.3

Description: IBM Analytics Content Hub is susceptible to information disclosure and potential further attacks due to an exposed JavaScript source map. This exposure could allow an attacker to read and debug the JavaScript code used in the application's API.

Recommendations: IBM Analytics Content Hub version 2.0: Remove or restrict access to the exposed JavaScript source map. IBM Analytics Content Hub version 2.1: Remove or restrict access to the exposed JavaScript source map. IBM Analytics Content Hub version 2.2: Remove or restrict access to the exposed JavaScript source map. IBM Analytics Content Hub version 2.3: Remove or restrict access to the exposed JavaScript source map.

Fix

Weakness Enumeration

CWE-540

Related Identifiers

BDU:2025-08870

CVE-2024-38327

Affected Products

Ibm Analytics Content Hub

References · 8

• https://osv.dev/vulnerability/CVE-2024-38327 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08870 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38327 · Security Note
• https://t.me/cvenotify/128997 · Telegram Post
• https://twitter.com/CVEnew/status/1943335872843178226 · Twitter Post
• https://ibm.com/support/pages/node/7234122 · Vendor Advisory, Patch
• https://twitter.com/VulmonFeeds/status/1943387230187278835 · Twitter Post
• https://t.me/cveNotify/130036 · Telegram Post