CVE-2015-1970

IBM WebSphere DataPower XC10 Appliance 2.1-2.1.0.3 and 2.5-2.5.0.4 - Sensitive Data Exposure via SSD Card Retention

Title source: llm
STIX 2.1

Description

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and attaching it elsewhere.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21962861
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT09803

Scores

EPSS 0.0033
EPSS Percentile 24.8%

Details

CWE
CWE-200
Status published
Products (9)
ibm/websphere_datapower_xc10_appliance_firmware 2.1.0.0
ibm/websphere_datapower_xc10_appliance_firmware 2.1.0.1
ibm/websphere_datapower_xc10_appliance_firmware 2.1.0.2
ibm/websphere_datapower_xc10_appliance_firmware 2.1.0.3
ibm/websphere_datapower_xc10_appliance_firmware 2.5.0.0
ibm/websphere_datapower_xc10_appliance_firmware 2.5.0.1
ibm/websphere_datapower_xc10_appliance_firmware 2.5.0.2
ibm/websphere_datapower_xc10_appliance_firmware 2.5.0.3
ibm/websphere_datapower_xc10_appliance_firmware 2.5.0.4
Published Aug 03, 2015
Tracked Since Feb 18, 2026