CVE-2024-39740: IBM Datacap Navigator information disclosure
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information for future attacks against the system. IBM X-Force ID: 296009.
Other sources
IBM Datacap Navigator uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39740?
CVE-2024-39740 has a medium severity rating due to the potential for unauthorized information disclosure.
How do I fix CVE-2024-39740?
To fix CVE-2024-39740, upgrade to the latest version of IBM Datacap Navigator or apply relevant patches from IBM.
What versions of IBM Datacap Navigator are affected by CVE-2024-39740?
IBM Datacap Navigator versions 9.1.5 through 9.1.9 are affected by CVE-2024-39740.
What type of vulnerability is CVE-2024-39740?
CVE-2024-39740 is an information disclosure vulnerability due to the exposure of version information in HTTP requests.
Can CVE-2024-39740 be exploited remotely?
Yes, CVE-2024-39740 can potentially be exploited remotely since it involves HTTP requests.