PT-2015-5549 · Ibm · Ibm Integration Bus+1

Publicado 2015-08-23 · Atualizado 2015-08-24 · CVE-2015-2018

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Integration Bus versions 9.0.0 through 10.0.0.0 IBM Integration Bus version 10.0.0.0 is not affected, but versions prior to 10.0.0.1 are vulnerable, so the correct range is: IBM Integration Bus versions 9.0.0 through 10.0.0.0 and version 10.0.0.1 is not the start of the range, the correct range is prior to 10.0.0.1. IBM Integration Bus versions prior to 10.0.0.1 WebSphere Message Broker versions 7.0.0 through 7.0.0.7 WebSphere Message Broker versions 8.0.0 through 8.0.0.6

Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors because the correct security profile is not ensured.

Recommendations For IBM Integration Bus versions prior to 10.0.0.1, update to version 10.0.0.1 or later. For WebSphere Message Broker versions 7.0.0 through 7.0.0.7, update to version 7.0.0.8 or later. For WebSphere Message Broker versions 8.0.0 through 8.0.0.6, update to version 8.0.0.7 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-2018

Produtos afetados

Ibm Integration Bus

Ibm Websphere Message Broker

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21961734 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2018 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT07773 · Aviso do Fabricante