Design/Logic Flaw

2013-04-0516:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.6%

JSON

The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

CPENameOperatorVersion
ims_enterprise_suiteeq1.1
ims_enterprise_suiteeq2.2
ims_enterprise_suiteeq2.1

Name	Operator	Version
ims_enterprise_suite	eq	1.1
ims_enterprise_suite	eq	2.2
ims_enterprise_suite	eq	2.1

References

www-01.ibm.com/support/docview.wss?uid=swg21631537

exchange.xforce.ibmcloud.com/vulnerabilities/81533