CVE-2015-7418

IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information.

Score

CVSS 3.0 4.4 Medium

Status

Modified - psirt@us.ibm.com

Published

2017-02-08

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Websphere Extreme Scale (Ibm)
• Websphere Datapower Xc10 Appliance (Ibm Corporation)

References

• http://www.ibm.com/support/docview.wss?uid=swg21971657
• http://www.securityfocus.com/bid/83634