CVE-2023-50324 IBM Cognos Command Center information disclosure
An attacker can obtain application environment details via the X-AspNet-Version header to facilitate further attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-50324?
CVE-2023-50324 is a medium-severity vulnerability in IBM Cognos Command Center, published on 1 Mar 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an attacker to obtain information of the application environment to conduct further attacks. IBM X-Force ID: 275038.
Weakness: CWE-200
Which versions are affected by CVE-2023-50324?
It affects 1 product.
Products include Ibm Cognos Command Center.
How do I fix CVE-2023-50324?
No fix has been published for CVE-2023-50324 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-50324 being exploited?
There is no known exploitation of CVE-2023-50324 in the wild and no public exploit code.
Other vulnerabilities in IBM Cognos Command Center
Sources
Also known as GHSA-x85q-fq3m-83jc.