IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10.6.0.8 IBM DataPower Gateway could disclose sensitive system information from other domains to an administrative user.
| Vendor | Product | Versions |
|---|---|---|
| ibm | ibm datapower | 10.6.1.0, 10.5.0.0, 10.6.0.0, 10.6.5.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ibm | datapower | mitre_affected | 90% |
Updated description with new details, added affected version 10.6.5.0, changed severity to HIGH, and noted that no exploit is available.
Initial creation
