Design/Logic Flaw

2014-05-0910:50:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.4%

JSON

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

CPENameOperatorVersion
operational_decision_managereq8.0
operational_decision_managereq8.5
operational_decision_managereq7.5

Name	Operator	Version
operational_decision_manager	eq	8.0
operational_decision_manager	eq	8.5
operational_decision_manager	eq	7.5

References

www-01.ibm.com/support/docview.wss?uid=swg21671324

exchange.xforce.ibmcloud.com/vulnerabilities/92573