description: IBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances allows "null" logins which could give read access to IPMI data to obtain sensitive information. IBM X-Force ID: 144894.
problem types: Obtain Information
affected:
{
product: DataPower Gateway
vendor: IBM
versions:
status: affected, version: 7.6.0.0
status: affected, version: 7.5.2.0
status: affected, version: 7.5.1.0
status: affected, version: 7.5.0.0
status: affected, version: 7.5.0.19
status: affected, version: 7.5.1.18
status: affected, version: 7.5.2.18
status: affected, version: 7.6.0.11
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 4.6
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
version: 3.0
]