← voltar
CVE-2018-2009

CVE-2018-2009

CVSS 6.5 MEDIUMEPSS 1.7%
IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.
CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
Produtos afetados
IBM · API Connect

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://exchange.xforce.ibmcloud.com/vulnerabilities/155148https://www.ibm.com/support/docview.wss?uid=ibm10794327http://www.securityfocus.com/bid/107396