CVE-2014-0946: Infoleak
The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0946?
The severity of CVE-2014-0946 is classified as medium risk due to potential exposure of sensitive information.
How do I fix CVE-2014-0946?
To fix CVE-2014-0946, ensure you apply the latest patches for IBM Operational Decision Manager versions 7.5, 8.0, and 8.5.
What software versions are affected by CVE-2014-0946?
CVE-2014-0946 affects IBM Operational Decision Manager versions 7.5, 8.0, and 8.5.
What type of vulnerabilities does CVE-2014-0946 expose?
CVE-2014-0946 exposes vulnerabilities related to inadequate Cache-Control HTTP headers that can lead to sensitive information leaks.
What should I do if I cannot patch for CVE-2014-0946 immediately?
If immediate patching is not possible for CVE-2014-0946, consider implementing additional security measures to restrict access to unattended workstations.