Information disclosure

2015-08-0319:59:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.

CPENameOperatorVersion
websphere_datapower_xc10_appliance_firmwareeq2.1.0.2
websphere_datapower_xc10_appliance_firmwareeq2.5.0.0
websphere_datapower_xc10_appliance_firmwareeq2.5.0.1
websphere_datapower_xc10_appliance_firmwareeq2.1.0.0
websphere_datapower_xc10_appliance_firmwareeq2.5.0.3
websphere_datapower_xc10_appliance_firmwareeq2.5.0.2
websphere_datapower_xc10_appliance_firmwareeq2.5.0.4
websphere_datapower_xc10_appliance_firmwareeq2.1.0.3
websphere_datapower_xc10_appliance_firmwareeq2.1.0.1

Name	Operator	Version
websphere_datapower_xc10_appliance_firmware	eq	2.1.0.2
websphere_datapower_xc10_appliance_firmware	eq	2.5.0.0
websphere_datapower_xc10_appliance_firmware	eq	2.5.0.1
websphere_datapower_xc10_appliance_firmware	eq	2.1.0.0
websphere_datapower_xc10_appliance_firmware	eq	2.5.0.3
websphere_datapower_xc10_appliance_firmware	eq	2.5.0.2
websphere_datapower_xc10_appliance_firmware	eq	2.5.0.4
websphere_datapower_xc10_appliance_firmware	eq	2.1.0.3
websphere_datapower_xc10_appliance_firmware	eq	2.1.0.1