Authorization Header Exposure in IBM DataPower Gateway

CVE-2018-1664

Summary

The IBM DataPower Gateway is vulnerable to exposure of authorization headers through its management interface, which may result in the exposure of sensitive login credentials stored in the browser cache. This issue can potentially allow unauthorized access to user accounts and sensitive data by exposing authentication details if not mitigated properly. Various versions of the gateway, including multiple releases across several major and minor versions, are affected. It is crucial for users and administrators to ensure that they take the necessary steps to protect their configurations and secure their systems.

References