CVE-2015-1982

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-07-20 · updated 2026-06-17
Weakness: CWE-200

Description

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message.

Affected products

IBM InfoSphere Master Data Management Collaboration Server: 9.1, 10.1, 11.0, 11.3, 11.4

References

http://www-01.ibm.com/support/docview.wss?uid=swg21960244
http://www.securityfocus.com/bid/75477
http://www-01.ibm.com/support/docview.wss?uid=swg21960244
http://www.securityfocus.com/bid/75477

Get alerted when CVE-2015-1982 or the next vulnerability affects your stack