Description
IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.
References
- IT14835 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21981462