Information disclosure in IBM Websphere Portal
CVE-2014-4761
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 before 8.0.0.1 CF14, and 8.5.0 through 8.5.0.0 CF02 allows remote authenticated users to discover credentials by reading HTML source code.
Vulnerability class: Information Disclosure
EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_portal — versions 6.1.0.0, 6.1.0.1, 6.1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)