Lucene search

[email protected]CVE-2014-6170

HistoryFeb 02, 2015 - 1:59 a.m.

CVE-2014-6170

2015-02-0201:59:02

CWE-200

[email protected]

web.nvd.nist.gov

ibm

websphere

message broker

integration bus

httpinput

sensitive information

leakage

cve-2014-6170

nvd

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.0%

JSON

The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.

Affected configurations

NVD

Node

ibmintegration_busMatch9.0

ibmintegration_busMatch9.0.0.1

ibmintegration_busMatch9.0.0.2

ibmintegration_busMatch9.0.0.3

Node

ibmwebsphere_message_brokerMatch7.0.

ibmwebsphere_message_brokerMatch7.0.0.1

ibmwebsphere_message_brokerMatch7.0.0.2

ibmwebsphere_message_brokerMatch7.0.0.3

ibmwebsphere_message_brokerMatch7.0.0.4

ibmwebsphere_message_brokerMatch7.0.0.5

ibmwebsphere_message_brokerMatch7.0.0.6

ibmwebsphere_message_brokerMatch7.0.0.7

ibmwebsphere_message_brokerMatch8.0

ibmwebsphere_message_brokerMatch8.0.0.1

ibmwebsphere_message_brokerMatch8.0.0.2

ibmwebsphere_message_brokerMatch8.0.0.3

ibmwebsphere_message_brokerMatch8.0.0.4

ibmwebsphere_message_brokerMatch8.0.0.5

CPENameOperatorVersion
ibm:integration_busibm integration buseq9.0
ibm:integration_busibm integration buseq9.0.0.1
ibm:integration_busibm integration buseq9.0.0.2
ibm:integration_busibm integration buseq9.0.0.3

CPE	Name	Operator	Version
ibm:integration_bus	ibm integration bus	eq	9.0
ibm:integration_bus	ibm integration bus	eq	9.0.0.1
ibm:integration_bus	ibm integration bus	eq	9.0.0.2
ibm:integration_bus	ibm integration bus	eq	9.0.0.3