CVE-2014-0912: Infoleak

Published Apr 20, 2018

Updated

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive product information via vectors related to an error page. IBM X-Force ID: 92072.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21674739

Event History

Apr 20, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-0912?

The severity of CVE-2014-0912 is medium with a severity value of 5.3.

What is the affected software for CVE-2014-0912?

The affected software for CVE-2014-0912 includes IBM Sterling B2B Integrator versions 5.1 and 5.2, and Sterling File Gateway versions 2.1 and 2.2.

How can remote attackers exploit CVE-2014-0912?

Remote attackers can exploit CVE-2014-0912 to obtain sensitive product information through vectors related to an error page.

Where can I find more information about CVE-2014-0912?

You can find more information about CVE-2014-0912 on the IBM support website at http://www-01.ibm.com/support/docview.wss?uid=swg21674739 and on the IBM X-Force Exchange at https://exchange.xforce.ibmcloud.com/vulnerabilities/92072.

What is the Common Weakness Enumeration (CWE) ID for CVE-2014-0912?

The Common Weakness Enumeration (CWE) ID for CVE-2014-0912 is 200.