NetSight
low2.1

CVE-2015-1970

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attack…

Impact

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.

Affected products

VendorProductAffected versions
IbmWebsphere Datapower Xc10 Appliance Firmware
Versions 2.1.0.0, 2.1.0.1, 2.1.0.2, 2.1.0.3, 2.5.0.0, 2.5.0.1

Weakness classification

References