PT-2018-4225 · Ibm · Ibm Infosphere Biginsights

Publicado 2018-04-20 · Atualizado 2018-05-22 · CVE-2014-4782

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights version 2.1.2

Description The issue allows remote authenticated users to discover SMTP server credentials through vectors related to the Alert management service.

Recommendations For IBM InfoSphere BigInsights version 2.1.2, consider restricting access to the Alert management service until a fix is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-4782

Produtos afetados

Ibm Infosphere Biginsights

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21693053 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-4782 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95029 · Aviso do Fabricante