CVE-2015-7445: Infoleak
First published: Fri Jan 01 2016(Updated: )
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM B2B Advanced Communications | =1.0 | |
| IBM B2B Advanced Communications | =1.0.0.1 | |
| IBM B2B Advanced Communications | =1.0.0.2 | |
| IBM B2B Advanced Communications | =1.0.0.3 | |
| IBM Multi-Enterprise Integration Gateway | =1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm b2b advanced communications
- version/ibm b2b advanced communications/1.0
- version/ibm b2b advanced communications/1.0.0.1
- version/ibm b2b advanced communications/1.0.0.2
- version/ibm b2b advanced communications/1.0.0.3
- canonical/ibm multi-enterprise integration gateway
- version/ibm multi-enterprise integration gateway/1.0.0