Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2018-1664

IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM DataPower Gateway 7.1.0.0 - 7.1.0.23, 7.2.0.0 - 7.2.0.21, 7.5.0.0 - 7.5.0.16, 7.5.1.0 - 7.5.1.15, 7.5.2.0 - 7.5.2.15, and 7.6.0.0 - 7.6.0.8 as well as IBM DataPower Gateway CD 7.7.0.0 - 7.7.1.2 echoing of AMP management interface authorization headers exposes login credentials in browser cache. IBM X-Force ID: 144890.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM DataPower Gateway CD

  • 7.7.0.0affected
  • 7.7.1.2affected

IBM DataPower Gateways

  • 7.1.0.0affected
  • 7.1.0.23affected
  • 7.2.0.0affected
  • 7.2.0.21affected
  • 7.5.0.0affected
  • 7.5.1.0affected
  • 7.6.0.0affected
  • 7.5.2.0affected
  • 7.5.0.16affected
  • 7.5.1.15affected
  • 7.6.0.8affected
  • 7.5.2.15affected

References