IBM DataPower Gateway

CPE Details

IBM DataPower Gateway
ibm
datapower_gateway
-
2018-12-17
17h02 +00:00
2018-12-17
17h02 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:datapower_gateway:-:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

datapower_gateway

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2015-7427 2015-11-14 01h00 +00:00 IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x before 7.0.0.10, 7.1.0.x before 7.1.0.7, and 7.2.x before 7.2.0.1 do not set the secure flag for unspecified cookies in an https session, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.
5
CVE-2015-7412 2015-11-08 21h00 +00:00 The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decryption API or a JWE decrypt action is enabled, do not require signed ciphertext data, which makes it easier for remote attackers to obtain plaintext data via a padding-oracle attack.
2.6