VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 1, 2016· Updated Jun 17, 2026

CVE-2015-7445

CVE-2015-7445

Description

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.

Affected products

7
  • IBM/B2b Advanced Communications5 versions
    cpe:2.3:a:ibm:b2b_advanced_communications:1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.3:*:*:*:*:*:*:*
    • (no CPE)range: >=1.0, <1.0.0.4
  • IBM/Multi Enterprise Integration Gateway2 versions
    cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0:*:*:*:*:*:*:*
    • (no CPE)range: >=1.0, <=1.0.0.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.