IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.
Weakness
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openpages_grc_platform | Ibm | 8.3 (including) | 8.3.0.2 (excluding) |
| Openpages_with_watson | Ibm | 9.0 (including) | 9.0.0.3 (excluding) |