CVE-2015-1970

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-08-03 · updated 2026-06-17
Weakness: CWE-200

Description

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.

Affected products

IBM Websphere Datapower Xc10 Appliance Firmware: 2.1.0.0, 2.1.0.1, 2.1.0.2, 2.1.0.3, 2.5.0.0, 2.5.0.1 (+3)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT09803
http://www-01.ibm.com/support/docview.wss?uid=swg21962861
http://www-01.ibm.com/support/docview.wss?uid=swg1IT09803
http://www-01.ibm.com/support/docview.wss?uid=swg21962861

Get alerted when CVE-2015-1970 or the next vulnerability affects your stack