{"id":"CVE-2024-38327","aliases":["EUVD-2024-54770","GHSA-3h9x-vrj4-4p73"],"status":"published","title":"IBM Analytics Content Hub information disclosure","description":"IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00326,"percentile":0.25927,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-540"],"published":"2025-07-10T14:14:40Z","modified":"2026-06-17T07:39:57Z","products":[{"vendor":"ibm","product":"analytics content hub"},{"vendor":"ibm","product":"analytics_content_hub"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7234122","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38327"},{"url":"https://github.com/advisories/GHSA-3h9x-vrj4-4p73"}],"sources":{"cve":[{"id":"CVE-2024-38327","title":"IBM Analytics Content Hub information disclosure","description":"IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.","status":"published","published":"2025-07-10T14:14:40.562Z","modified":"2025-08-18T01:35:53.589Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-540"],"updated_at":"2026-11-02T14:34:16.78507Z"}],"euvd":[{"id":"EUVD-2024-54770","description":"IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.","status":"published","published":"2025-07-10T14:14:40Z","modified":"2025-08-18T01:35:53Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:31:56.298799Z"}],"ghsa":[{"id":"GHSA-3h9x-vrj4-4p73","title":"IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and...","description":"IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.","status":"published","published":"2025-07-10T15:31:29Z","modified":"2025-07-10T15:31:29Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-540"],"updated_at":"2026-11-02T15:02:58.788337Z"}],"nvd":[{"id":"CVE-2024-38327","description":"IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exposed JavaScript source map which could assist an attacker to read and debug JavaScript used in the application's API.","status":"published","published":"2025-07-10T15:15:25.833Z","modified":"2026-06-17T07:39:57.153Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-540"],"updated_at":"2026-11-02T14:10:47.073504Z"}]}}