PT-2015-3827 · Ibm · Ibm Api Management

Publicado 2015-01-21 · Atualizado 2017-09-08 · CVE-2014-6172

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM API Management version 3.0 before 3.0.4.0 IF1

Description The issue allows remote attackers to obtain sensitive analytics information in an encrypted form.

Recommendations For IBM API Management version 3.0 before 3.0.4.0 IF1, update to version 3.0.4.0 IF1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-6172

Produtos afetados

Ibm Api Management

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21694460 · Aviso do Fabricante
• http://securitytracker.com/id/1031613 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98417 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6172 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1LI78291 · Aviso do Fabricante