Information disclosure in IBM Openpages Grc Platform

CVE-2015-0143

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages.

Vulnerability class: Information Disclosure

EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.

Affected products

Ibm Openpages_grc_platform — versions 6.2.0.0, 6.2.1.0, 6.2.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)