Skip to content
OpenAdvisories
Medium · 5.3 CVE-2018-1668 EUVD-2018-12247GHSA-vvq4-j9gg-65qg

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances…

Published Jan 29, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.

Affected products

VendorProductAffectedFixed
IBM DataPower Gateway 7.6.0.0, 7.5.2.0, 7.5.1.0, 7.5.0.0, 7.5.0.19, 7.5.1.18, 7.5.2.18, 7.6.0.11 —

References