CVE-2014-6172: Infoleak
Published Jan 21, 2015
·Updated
IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors.
Affected Software
6 affected components
IBM API Management=3.0.0.0
IBM API Management=3.0.0.1
IBM API Management=3.0.2.0
IBM API Management=3.0.2.1
IBM API Management=3.0.3.0
IBM API Management=3.0.4.0
Remediation
Patch Available
Event History
Jan 21, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6172?
CVE-2014-6172 is classified as a medium severity vulnerability.
2
How do I fix CVE-2014-6172?
To fix CVE-2014-6172, upgrade IBM API Management to version 3.0.4.0 or later.
3
What types of information can be accessed due to CVE-2014-6172?
CVE-2014-6172 allows remote attackers to obtain sensitive analytics information.
4
Which versions of IBM API Management are affected by CVE-2014-6172?
Versions 3.0.0.0 to 3.0.3.0 of IBM API Management are affected by CVE-2014-6172.
5
Is CVE-2014-6172 an encrypted data vulnerability?
Yes, CVE-2014-6172 allows attackers to access sensitive information in an encrypted form.