CVE-2024-28765

Full vulnerability record from the local CVENow database.
Description

IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Severity
MEDIUM
CVSS score
5.3 (v3.1)
Vulnerability status
Analyzed
Source identifier
[email protected]
Published
2026-05-27 14:16:40.600000
Last modified
2026-10-27 18:10:00.130000
View original CVE JSON
{
  "id": "CVE-2024-28765",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-27T14:16:40.600",
  "lastModified": "2026-10-27T18:10:00.130",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system."
    },
    {
      "lang": "es",
      "value": "IBM SDI 7.2.0.0 hasta 7.2.0.14 y IBM Security Directory Integrator 10.0.0.0 hasta 10.0.0.2 podrían permitir a un atacante remoto obtener información sensible cuando se devuelve un mensaje de error técnico detallado en el navegador. Esta información podría ser utilizada en ataques posteriores contra el sistema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "IBM",
          "product": "SDI",
          "defaultStatus": "unaffected",
          "cpes": [
            "cpe:2.3:a:ibm:sdi:7.2.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:sdi:7.2.0.14:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "7.2.0.0",
              "lessThanOrEqual": "7.2.0.14",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "IBM",
          "product": "Security Directory Integrator",
          "defaultStatus": "unaffected",
          "cpes": [
            "cpe:2.3:a:ibm:security_directory_integrator:10.0.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:security_directory_integrator:10.0.0.2:*:*:*:*:*:*:*"
          ],
          "versions": [
            {
              "version": "10.0.0.0",
              "lessThanOrEqual": "10.0.0.2",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-28T15:39:43.878591Z",
          "id": "CVE-2024-28765",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-209"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ibm:security_directory_integrator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "7.2.0",
              "versionEndExcluding": "7.2.0.15",
              "matchCriteriaId": "700D0A1A-E6BA-43F9-AC1B-00C886825DCA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ibm:security_directory_integrator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "10.0.0",
              "versionEndExcluding": "10.0.0.3",
              "matchCriteriaId": "FD3DA989-EA9D-4C1B-AEA1-7DDEFBBD17AB"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7268903",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}