Information disclosure in Ibm Infosphere_master_data_management

CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error messag…

Vulnerability class: Information Disclosure

EPSS: 0.010 (57.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Infosphere_master_data_management — versions 9.1, 10.1, 11.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_BID)