CVE-2014-4819

The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain sensitive information by reading the error page.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-09-18

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Integration Bus (Ibm)
• Websphere Message Broker (Ibm)

References

• http://secunia.com/advisories/61356
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT03097
• http://www-01.ibm.com/support/docview.wss?uid=swg21682681
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95456