Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3389-xxp5-92p2

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

EPSS

Процентиль: 73%
0.00751
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 11 лет назад

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

EPSS

Процентиль: 73%
0.00751
Низкий

Дефекты

CWE-200