CVE-2024-40704

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers. IBM X-Force ID: 298277.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Aug 15, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-407056.5IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted file uploads. IBM X CVE-2024-407064.3IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks a CVE-2024-407097.8A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to root level.CVE-2024-40718.8A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some u CVE-2024-407108.8A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extracti CVE-2024-407119.8A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).CVE-2024-407127.8A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perform local privilege es CVE-2024-407137.8A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authe CVE-2024-407148.3An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive CVE-2024-407157.7A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypas CVE-2024-407178.8A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by upda CVE-2024-407188.8A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through exploiting an SSRF vu