CVE-2015-5024 Information disclosure in n/a

What is CVE-2015-5024?

CVE-2015-5024 is a medium-severity vulnerability in n/a, published on 5 Oct 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors.

Weakness: CWE-200

Which versions are affected by CVE-2015-5024?

It affects 1 product.

Products include Ibm Emptoris Sourcing.

How do I fix CVE-2015-5024?

No fix has been published for CVE-2015-5024 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-5024 being exploited?

There is no known exploitation of CVE-2015-5024 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-4896 Other in Emptoris Sourcing Medium 6.5
• CVE-2017-1450 Open redirect in Emptoris Sourcing Medium 6.1
• CVE-2016-8947 Open redirect in Emptoris Sourcing Medium 6.1
• CVE-2016-0329 Open redirect in n/a Medium 5.4
• CVE-2017-1444 Cross-site scripting in Emptoris Sourcing Medium 5.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vqrr-c7qg-7fr3.