CVE-2014-3036

EPSS 0.22%
Published 08.06.2014 23:55:02
Last modified 12.04.2025 10:46:40
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Api Management Version3.0.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.22%	0.415

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://secunia.com/advisories/59044

http://www-01.ibm.com/support/docview.wss?uid=swg1LI78000

http://www-01.ibm.com/support/docview.wss?uid=swg21674232

Vendor Advisory

http://www.securityfocus.com/bid/67941

https://exchange.xforce.ibmcloud.com/vulnerabilities/93302

https://nvd.nist.gov/vuln/detail/CVE-2014-3036

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3036

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3036

EUVD