CVE-2015-7418

published 2017-02-08

CVE-2015-7418: IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could…

Priority P4 15 medium 4.4 CVSS 3.0

AV L AC L PR H UI N S U C H I N A N

IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator privileges to obtain sensitive information.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_extreme_scale	—	—
ibm	websphere_extreme_scale	—	—
ibm	websphere_extreme_scale	—	—
ibm	websphere_extreme_scale	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—
ibm_corporation	websphere_datapower_xc10_appliance	—	—

CVSS provenance

nvd v3.0 4.4 MEDIUM CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200