CVE-2014-4782 Information disclosure in n/a

What is CVE-2014-4782?

CVE-2014-4782 is a medium-severity vulnerability in n/a, published on 20 Apr 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029.

Weakness: CWE-200

Which versions are affected by CVE-2014-4782?

It affects 1 product.

Products include Ibm Infosphere Biginsights.

How do I fix CVE-2014-4782?

No fix has been published for CVE-2014-4782 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-4782 being exploited?

There is no known exploitation of CVE-2014-4782 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-3993 IBM InfoSphere BigInsights Invalid Input Exploited Medium 6.5
• CVE-2015-1947 Privilege escalation in n/a High 7.4
• CVE-2015-1889 Missing authorization in n/a Medium 6.5
• CVE-2013-3992 Cross-site request forgery in n/a Medium 6.0
• CVE-2017-1552 Cross-site scripting in BigInsights Medium 5.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-q38c-9r3c-5gfv.