Description
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21972480
- IT12573 vendor-advisory
- 79681 vdb-entry