NetSight
medium5.3

CVE-2018-1668

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" login…

Impact

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.

Affected products

VendorProductAffected versions
IbmDatapower Gateway
from 7.5.0.0 through 7.5.0.19
from 7.5.1.0 through 7.5.1.18
from 7.5.2.0 through 7.5.2.18
from 7.6.0.0 through 7.6.0.11

Weakness classification

References