CVE-2016-0341: Infoleak
First published: Sun May 15 2016(Updated: )
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM B2B Advanced Communications | =1.0 | |
| IBM B2B Advanced Communications | =1.0.0.1 | |
| IBM B2B Advanced Communications | =1.0.0.2 | |
| IBM B2B Advanced Communications | =1.0.0.3 | |
| IBM Multi-Enterprise Integration Gateway | =1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/ibm
- canonical/ibm b2b advanced communications
- version/ibm b2b advanced communications/1.0
- version/ibm b2b advanced communications/1.0.0.1
- version/ibm b2b advanced communications/1.0.0.2
- version/ibm b2b advanced communications/1.0.0.3
- canonical/ibm multi-enterprise integration gateway
- version/ibm multi-enterprise integration gateway/1.0.0