Vulnerability Details CVE-2015-7445
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.5%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 3.5
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573
- http://www-01.ibm.com/support/docview.wss?uid=swg21972480
- http://www.securityfocus.com/bid/79681
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573
- http://www-01.ibm.com/support/docview.wss?uid=swg21972480
- http://www.securityfocus.com/bid/79681
Products affected by CVE-2015-7445
-
cpe:2.3:a:ibm:b2b_advanced_communications:1.0
-
cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.1
-
cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.2
-
cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.3
-
cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0