medium5.0
CVE-2014-6170
The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers…
Impact
The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers to obtain sensitive information by triggering a SOAP fault.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Integration Bus | Versions 9.0, 9.0.0.1, 9.0.0.2, 9.0.0.3 |
| Ibm | Websphere Message Broker | Versions 7.0., 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT01929
- http://www-01.ibm.com/support/docview.wss?uid=swg21690725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98309
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT01929
- http://www-01.ibm.com/support/docview.wss?uid=swg21690725
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98309