CVE-2015-7445

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-01 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.

Affected products

IBM B2B Advanced Communications: 1.0, 1.0.0.1, 1.0.0.2, 1.0.0.3
IBM Multi-Enterprise Integration Gateway: 1.0.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573
http://www-01.ibm.com/support/docview.wss?uid=swg21972480
http://www.securityfocus.com/bid/79681
http://www-01.ibm.com/support/docview.wss?uid=swg1IT12573
http://www-01.ibm.com/support/docview.wss?uid=swg21972480
http://www.securityfocus.com/bid/79681

Get alerted when CVE-2015-7445 or the next vulnerability affects your stack