CVE-2014-0946 | BDVDB-2026-61487 Detail

Description#

The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21671324
https://exchange.xforce.ibmcloud.com/vulnerabilities/92573

Exploit#

No public exploit known

History#

Version 12014-05-09Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.