CVE-2024-51477: IBM InfoSphere Information Server information disclosure
Published Mar 28, 2025
·Updated
IBM InfoSphere Information Server 11.7
could allow an authenticated to obtain sensitive username information due to an observable response discrepancy.
Other sources
IBM InfoSphere Information Server could allow an authenticated to obtain sensitive username information due to an observable response discrepancy.
— IBM
Affected Software
6 affected componentsFixes available
IBM InfoSphere Information Server
IBM InfoSphere Information Server<=11.7
All of the following
IBM InfoSphere Information Server>=11.7<11.7.1
Any of the following
IBM AIX
Linux Linux kernel
Microsoft Windows
Event History
Mar 28, 2025
CVE Published
via IBM·12:00 AM
CVE Published
via MITRE·11:51 PM
Data Sourced
via MITRE·11:51 PM
DescriptionSeverityWeakness
Mar 29, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-51477?
CVE-2024-51477 is classified as a medium severity vulnerability.
2
How do I fix CVE-2024-51477?
To mitigate CVE-2024-51477, update to the latest version of IBM InfoSphere Information Server 11.7 or apply the recommended patch.
3
Who is affected by CVE-2024-51477?
CVE-2024-51477 affects users of IBM InfoSphere Information Server version 11.7.
4
What type of vulnerability is CVE-2024-51477?
CVE-2024-51477 is an information disclosure vulnerability.
5
What can attackers achieve with CVE-2024-51477?
Attackers exploiting CVE-2024-51477 could gain unauthorized access to sensitive username information.