VULNERABILITY INTELLIGENCE
CVE-2014-6146
CVSS score1.9 LOW
EPSS probability0.31%
CISA KEVNot currently listed
Published2014-11-08
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N
Description
IBM Sterling B2B Integrator 5.2.x through 5.2.4, when the Connect:Direct Server Adapter is configured, does not properly process the logging configuration, which allows local users to obtain sensitive information by reading log files.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor