4.3
CVE-2015-7445
- EPSS 0.97%
- Veröffentlicht 01.01.2016 05:59:07
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginIBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ B2b Advanced Communications Version 1.0
Ibm ≫ B2b Advanced Communications Version 1.0.0.1
Ibm ≫ B2b Advanced Communications Version 1.0.0.2
Ibm ≫ B2b Advanced Communications Version 1.0.0.3
Ibm ≫ Multi-enterprise Integration Gateway Version 1.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.97% | 0.57 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 2.8 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| NIST | 3.5 | 6.8 | 2.9 |
AV:N/AC:M/Au:S/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573
http://www-01.ibm.com/support/docview.wss?uid=swg21972480
http://www.securityfocus.com/bid/79681