CVE-2014-6146

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.

Score

CVSS 2.0 1.9 Low

Status

Modified - psirt@us.ibm.com

Published

2014-11-08

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Sterling B2b Integrator (Ibm)

References

• http://secunia.com/advisories/62190
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT04337
• http://www-01.ibm.com/support/docview.wss?uid=swg21689082
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96916