CVE-2015-1982: Infoleak

Published Jul 20, 2015

Updated

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message.

Affected Software

5 affected components

IBM InfoSphere Master Data Management=9.1

IBM InfoSphere Master Data Management=10.1

IBM InfoSphere Master Data Management=11.0

IBM InfoSphere Master Data Management=11.3

IBM InfoSphere Master Data Management=11.4

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21960244

Event History

Jul 20, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1982?

CVE-2015-1982 is classified as a medium severity vulnerability.

How do I fix CVE-2015-1982?

To fix CVE-2015-1982, apply the relevant fix pack, specifically FP03 or later, to your affected IBM InfoSphere Master Data Management installation.

What versions are affected by CVE-2015-1982?

CVE-2015-1982 affects IBM InfoSphere Master Data Management versions 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03.

What is the impact of CVE-2015-1982?

CVE-2015-1982 allows remote authenticated users to obtain sensitive information by revealing the full file path in error messages.

Who can exploit CVE-2015-1982?

CVE-2015-1982 can be exploited by remote authenticated users with the capability to send crafted requests.