CVE-2014-4781 Information disclosure in n/a

What is CVE-2014-4781?

CVE-2014-4781 is a medium-severity vulnerability in n/a, published on 13 Feb 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x before 3.0.0.2 allows remote attackers to obtain sensitive Alert management-services API information via a network-tracing attack.

Weakness: CWE-200

Which versions are affected by CVE-2014-4781?

It affects 1 product.

Products include Ibm Infosphere Biginsights.

How do I fix CVE-2014-4781?

No fix has been published for CVE-2014-4781 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-4781 being exploited?

There is no known exploitation of CVE-2014-4781 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-3993 IBM InfoSphere BigInsights Invalid Input Exploited Medium 6.5
• CVE-2015-1947 Privilege escalation in n/a High 7.4
• CVE-2014-4782 Information disclosure in n/a Medium 6.5
• CVE-2015-1889 Missing authorization in n/a Medium 6.5
• CVE-2013-3992 Cross-site request forgery in n/a Medium 6.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x2rv-w9h9-ch6h.