CVEvulnerability
CVE-2014-4819
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain sensitive information by reading the error page.
Affected configurations
• ibm websphere message broker 8.0
• ibm websphere message broker 8.0.0.1
• ibm websphere message broker 8.0.0.2
• ibm websphere message broker 8.0.0.3
• ibm websphere message broker 8.0.0.4
• ibm websphere message broker 8.0.0.5
• ibm integration bus 9.0
• ibm integration bus 9.0.0.1
• ibm integration bus 9.0.0.2
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/61356 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT03097 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21682681 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95456 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/61356 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT03097 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21682681 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95456 exchange.xforce.ibmcloud.com