CVE-2014-6170: Infoleak
The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6170?
The severity of CVE-2014-6170 is considered medium, as it allows remote attackers to obtain sensitive information.
How do I fix CVE-2014-6170?
To fix CVE-2014-6170, upgrade IBM WebSphere Message Broker or IBM Integration Bus to a version that addresses this vulnerability.
What versions are affected by CVE-2014-6170?
CVE-2014-6170 affects IBM WebSphere Message Broker versions 7.0, 8.0, and IBM Integration Bus version 9.0 prior to their respective fixes.
Can CVE-2014-6170 be exploited remotely?
Yes, CVE-2014-6170 can be exploited remotely by attackers to trigger a SOAP fault and gain sensitive information.
What impact does CVE-2014-6170 have on my IBM software?
CVE-2014-6170 can lead to leakage of sensitive information, which may compromise the security of your IBM WebSphere Message Broker or Integration Bus systems.