CVE-2016-0341

HIGH

IBM Multi-Enterprise Integration Gateway <1.0.0.1 & B2B Advanced Co...

Title source: llm
STIX 2.1

Description

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 through 1.0.0.4 do not require HTTPS, which might allow remote attackers to obtain sensitive information by sniffing the network.

References (2)

Core 2
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT14835
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21981462

Scores

CVSS v3 7.5
EPSS 0.0136
EPSS Percentile 68.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (5)
ibm/b2b_advanced_communications 1.0
ibm/b2b_advanced_communications 1.0.0.1
ibm/b2b_advanced_communications 1.0.0.2
ibm/b2b_advanced_communications 1.0.0.3
ibm/multi-enterprise_integration_gateway 1.0.0
Published May 15, 2016
Tracked Since Feb 18, 2026