CVE-2024-28765 affects IBM SDI versions 7.2.0.0 through 7.2.0.14 and 10.0.0.0 through 10.0.0.2. The vulnerability arises from the generation of detailed error messages that include sensitive information, which are returned to the browser when an error occurs. This exposure can provide attackers with information useful for further attacks. The vulnerability has a CVSS 3.1 base score of 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting confidentiality but not integrity or availability. No official patch or remediation level has been published by IBM as of the provided data.

The vulnerability allows remote attackers to obtain sensitive information through detailed error messages displayed in the browser. This information disclosure could facilitate further attacks against the affected IBM SDI systems. However, the vulnerability does not directly impact system integrity or availability. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider minimizing the exposure of detailed error messages to end users, for example by configuring error handling to avoid displaying sensitive information in browser responses. Monitor IBM advisories for updates on patches or official mitigations.