Vulnerability Details CVE-2015-1970
The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.6%
CVSS Severity
CVSS v2 Score 2.1
References
Products affected by CVE-2015-1970
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.0
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.1
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.2
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.1.0.3
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.0
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.1
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.2
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.3
-
cpe:2.3:o:ibm:websphere_datapower_xc10_appliance_firmware:2.5.0.4