| Package | Affected versions | Patched versions |
|---|---|---|
| integration bus | = 10.0= 10.0.0.1= 10.0.0.2= 10.0.0.3= 10.0.0.4= 9.0= 9.0.0.1= 9.0.0.2= 9.0.0.3= 9.0.0.4= 9.0.0.5 | |
| websphere message broker | = 8.0= 8.0.0.1= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7 |
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free