CVE-2014-0912

EPSS 0.17%
Veröffentlicht 20.04.2018 21:29:00
Zuletzt bearbeitet 21.11.2024 02:03:01
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page. IBM X-Force ID: 92072.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Sterling B2b Integrator Version5.1

Ibm ≫ Sterling B2b Integrator Version5.2

Ibm ≫ Sterling File Gateway Version2.1

Ibm ≫ Sterling File Gateway Version2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.352

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg21674739

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/92072

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2014-0912

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0912

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0912

EUVD