Vulnerability Description
The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Datapower Xc10 Appliance Firmware | 2.1.0.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT09803
- http://www-01.ibm.com/support/docview.wss?uid=swg21962861PatchVendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT09803
- http://www-01.ibm.com/support/docview.wss?uid=swg21962861PatchVendor Advisory
FAQ
What is CVE-2015-1970?
CVE-2015-1970 is a vulnerability with a CVSS score of 2.1 (LOW). The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by ex...
How severe is CVE-2015-1970?
CVE-2015-1970 has been rated LOW with a CVSS base score of 2.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1970?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Websphere Datapower Xc10 Appliance Firmware.