CVE-2014-6146

CVE-2014-6146

EPSS 0.3%

IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/62190 https://exchange.xforce.ibmcloud.com/vulnerabilities/96916 http://www-01.ibm.com/support/docview.wss?uid=swg1IT04337 http://www-01.ibm.com/support/docview.wss?uid=swg21689082