CVEvulnerability

CVE-2014-6146

1.9 LOW Published 2014-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.

Affected configurations

• ibm sterling b2b integrator 5.2.1 • ibm sterling b2b integrator 5.2.2 • ibm sterling b2b integrator 5.2.4

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References