IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Emptoris_strategic_supply_management | Ibm | 10.1.0.0 (including) | 10.1.0.38 (excluding) |
| Emptoris_strategic_supply_management | Ibm | 10.1.1.0 (including) | 10.1.1.35 (excluding) |
| Emptoris_strategic_supply_management | Ibm | 10.1.3.0 (including) | 10.1.3.30 (excluding) |