CVE-2024-38327
Last modified
CVE-2024-38327 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Analytics Content Hub | >= 2.0, < 2.4 |
References
- https://www.ibm.com/support/pages/node/7234122Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-38327?
How severe is CVE-2024-38327?
How do I fix CVE-2024-38327?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-3832Object corruption in V8 in Google Chrome prior to 124.0.6367…8.8
- CVE-2024-38320IBM Storage Protect for Virtual Environments: Data Protectio…7.5
- CVE-2024-38321IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and…6.5
- CVE-2024-38322IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.…7.5
- CVE-2024-38324IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-se…6.5
- CVE-2024-38325IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-se…7.5
- CVE-2024-38329IBM Storage Protect for Virtual Environments: Data Protectio…7.7
- CVE-2024-3833Object corruption in WebAssembly in Google Chrome prior to 1…8.8
- CVE-2024-38330IBM System Management for i 7.2, 7.3, and 7.4 could allow a …7.8
- CVE-2024-38335IBM Security QRadar Network Threat Analytics 1.0.0 through 1…4.5
- CVE-2024-38337IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3…9.1
- CVE-2024-3834Use after free in Downloads in Google Chrome prior to 124.0.…8.8
Are you affected by CVE-2024-38327?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST