Lucene search

IbmCVE-2015-2018

HistoryAug 23, 2015 - 3:59 p.m.

CVE-2015-2018

2015-08-2315:59:00

CWE-200

ibm

web.nvd.nist.gov

ibm

integration bus

websphere

message broker

cve-2015-2018

security

vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

34.2%

JSON

IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the correct security profile is selected, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected configurations

Nvd

Node

ibmintegration_busMatch9.0

ibmintegration_busMatch10.0

ibmwebsphere_message_brokerMatch7.0.

ibmwebsphere_message_brokerMatch7.0.0.1

ibmwebsphere_message_brokerMatch7.0.0.2

ibmwebsphere_message_brokerMatch7.0.0.3

ibmwebsphere_message_brokerMatch7.0.0.4

ibmwebsphere_message_brokerMatch7.0.0.5

ibmwebsphere_message_brokerMatch7.0.0.6

ibmwebsphere_message_brokerMatch7.0.0.7

ibmwebsphere_message_brokerMatch8.0

ibmwebsphere_message_brokerMatch8.0.0.1

ibmwebsphere_message_brokerMatch8.0.0.2

ibmwebsphere_message_brokerMatch8.0.0.3

ibmwebsphere_message_brokerMatch8.0.0.4

ibmwebsphere_message_brokerMatch8.0.0.5

ibmwebsphere_message_brokerMatch8.0.0.6

VendorProductVersionCPE
ibmintegration_bus9.0cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*
ibmintegration_bus10.0cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.1cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.2cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.3cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.4cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.5cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.6cpe:2.3:a:ibm:websphere_message_broker:7.0.0.6:*:*:*:*:*:*:*
ibmwebsphere_message_broker7.0.0.7cpe:2.3:a:ibm:websphere_message_broker:7.0.0.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	integration_bus	9.0	cpe:2.3:a:ibm:integration_bus:9.0:::::::*
ibm	integration_bus	10.0	cpe:2.3:a:ibm:integration_bus:10.0:::::::*
ibm	websphere_message_broker	7.0.	cpe:2.3:a:ibm:websphere_message_broker:7.0.:::::::*
ibm	websphere_message_broker	7.0.0.1	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:::::::*
ibm	websphere_message_broker	7.0.0.2	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:::::::*
ibm	websphere_message_broker	7.0.0.3	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:::::::*
ibm	websphere_message_broker	7.0.0.4	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:::::::*
ibm	websphere_message_broker	7.0.0.5	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:::::::*
ibm	websphere_message_broker	7.0.0.6	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.6:::::::*
ibm	websphere_message_broker	7.0.0.7	cpe:2.3:a:ibm:websphere_message_broker:7.0.0.7:::::::*

Rows per page:

1-10 of 171

References

www-01.ibm.com/support/docview.wss?uid=swg1IT07773

www-01.ibm.com/support/docview.wss?uid=swg21961734

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

34.2%

JSON

Related for CVE-2015-2018