Information disclosure in Ibm Operational_decision_manager

CVE-2014-0946

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sen…

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Operational_decision_manager — versions 7.5, 8.0, 8.5
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)