CVE-2016-0341

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2016-05-15

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• B2b Advanced Communications (Ibm)
• Multi-enterprise Integration Gateway (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835
• http://www-01.ibm.com/support/docview.wss?uid=swg21981462