CVE-2015-2018: Infoleak
IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2018?
The severity of CVE-2015-2018 is classified as moderate due to the potential exposure of sensitive information to remote authenticated users.
How do I fix CVE-2015-2018?
To mitigate CVE-2015-2018, upgrade IBM Integration Bus to version 10.0.0.1 or above and WebSphere Message Broker to versions 7.0.0.8 or 8.0.0.7 or later.
Who is affected by CVE-2015-2018?
CVE-2015-2018 affects IBM Integration Bus versions 9.0 and 10.0, as well as WebSphere Message Broker versions 7.0 to 8.0.
What type of information can be exposed due to CVE-2015-2018?
CVE-2015-2018 allows remote authenticated users to potentially obtain sensitive information from the affected systems.
Is there a workaround for CVE-2015-2018?
There are no known workaround solutions for CVE-2015-2018, so applying the recommended updates is essential.