VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 1, 2016· Updated May 6, 2026

CVE-2015-7445

CVE-2015-7445

Description

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.

Affected products

5
  • IBM/B2b Advanced Communications4 versions
    cpe:2.3:a:ibm:b2b_advanced_communications:1.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:b2b_advanced_communications:1.0.0.3:*:*:*:*:*:*:*
  • IBM/Multi Enterprise Integration Gateway
    cpe:2.3:a:ibm:multi-enterprise_integration_gateway:1.0.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.