CVE-2014-4819: Infoleak
First published: Thu Sep 18 2014(Updated: )
The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain sensitive information by reading the error page.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Message Broker | =8.0 | |
| IBM WebSphere Message Broker | =8.0.0.1 | |
| IBM WebSphere Message Broker | =8.0.0.2 | |
| IBM WebSphere Message Broker | =8.0.0.3 | |
| IBM WebSphere Message Broker | =8.0.0.4 | |
| IBM WebSphere Message Broker | =8.0.0.5 | |
| IBM Integration Bus for z/OS | =9.0 | |
| IBM Integration Bus for z/OS | =9.0.0.1 | |
| IBM Integration Bus for z/OS | =9.0.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-4819?
CVE-2014-4819 has a medium severity level due to its potential for information disclosure.
How do I fix CVE-2014-4819?
To fix CVE-2014-4819, upgrade IBM WebSphere Message Broker to version 8.0.0.6 or later and IBM Integration Bus to version 9.0.0.3 or later.
Who is affected by CVE-2014-4819?
CVE-2014-4819 affects IBM WebSphere Message Broker 8.0 and IBM Integration Bus 9.0 across various versions prior to specified updates.
What type of information can be disclosed due to CVE-2014-4819?
CVE-2014-4819 allows remote authenticated users to read sensitive information from the error page.
Is there a workaround for CVE-2014-4819 if I cannot update immediately?
Disabling access to the web user interface for unauthorized users can serve as a temporary workaround for CVE-2014-4819.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm websphere message broker
- version/ibm websphere message broker/8.0
- version/ibm websphere message broker/8.0.0.1
- version/ibm websphere message broker/8.0.0.2
- version/ibm websphere message broker/8.0.0.3
- version/ibm websphere message broker/8.0.0.4
- version/ibm websphere message broker/8.0.0.5
- canonical/ibm integration bus for z/os
- version/ibm integration bus for z/os/9.0
- version/ibm integration bus for z/os/9.0.0.1
- version/ibm integration bus for z/os/9.0.0.2