CVE-2014-4819

{"id": "CVE-2014-4819", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-09-18T10:55:11.063", "references": [{"url": "http://secunia.com/advisories/61356", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT03097", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682681", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95456", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain sensitive information by reading the error page."}, {"lang": "es", "value": "La interfaz web de usuario en IBM WebSphere Message Broker 8.0 anterior a 8.0.0.6 e IBM Integration Bus 9.0 anterior a 9.0.0.3 permite a usuarios autenticados remotos obtener informaci\u00f3n sensible leyendo la p\u00e1gina de error."}], "lastModified": "2017-08-29T01:35:08.640", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F93BF57-FD4F-456C-8DFD-CEF8B5AEF35D"}, {"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B859DAA9-1B0E-47CE-813D-108776C3B239"}, {"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2458C42A-90F7-457C-AAD6-205D9893A993"}, {"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BFEC988-5E94-474F-9A60-966B8FA8B8F6"}, {"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE5CCF85-8149-43DB-A594-99895D94F447"}, {"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA0D7E80-2607-4567-8D1C-2ADA32F174D8"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D9B868C-9348-4D31-95F9-FEC3D91158AE"}, {"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "725E3F95-4096-497D-8F2A-02C185ACF8CB"}, {"criteria": "cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACB80DEF-E09A-4B51-96B8-75F0AD9C6499"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}