CVE-2024-28765 is a vulnerability in IBM SDI versions 7.2.0.0 through 7.2.0.14 and 10.0.0.0 through 10.0.0.2 where detailed technical error messages are returned to the browser. These error messages may contain sensitive information that could be leveraged by remote attackers to gain insights useful for further attacks. The vulnerability is classified under CWE-209, which concerns the generation of error messages containing sensitive information. The CVSS score of 5.3 reflects a medium impact with network attack vector, low attack complexity, no privileges or user interaction required, and confidentiality impact only.

The vulnerability allows remote attackers to obtain sensitive information through detailed error messages displayed in the browser. This information disclosure could facilitate further attacks against the system. There is no indication of direct integrity or availability impact. No known exploits have been reported in the wild as of the published date.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until an official fix is available, consider configuring the system to suppress detailed error messages in browser responses to prevent sensitive information leakage.