Ibm

Api Connect

78 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2019-4202

  • EPSS 2.04%
  • Published 15.04.2019 15:29:00
  • Last modified 21.11.2024 04:43:18

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.

9.8

CVE-2019-4155

  • EPSS 0.78%
  • Published 08.04.2019 15:29:02
  • Last modified 21.11.2024 04:43:15

IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID Connect (OIDC) user registry. IBM X-Force ID: 158544.

5.3

CVE-2019-4051

  • EPSS 0.2%
  • Published 08.04.2019 15:29:02
  • Last modified 21.11.2024 04:43:05

Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted ...

4.6

CVE-2018-1874

  • EPSS 0.14%
  • Published 02.04.2019 14:29:00
  • Last modified 21.11.2024 04:00:31

IBM API Connect 5.0.0.0 through 5.0.8.5 could display highly sensitive information to an attacker with physical access to the system. IBM X-Force ID: 151636.

7.5

CVE-2019-4052

  • EPSS 0.84%
  • Published 22.03.2019 19:29:00
  • Last modified 21.11.2024 04:43:05

IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.

6.5

CVE-2018-2009

  • EPSS 0.26%
  • Published 11.03.2019 22:29:00
  • Last modified 21.11.2024 04:03:35

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.

9.8

CVE-2019-4008

  • EPSS 0.49%
  • Published 07.02.2019 15:29:00
  • Last modified 21.11.2024 04:43:02

API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626.

4.9

CVE-2018-1976

  • EPSS 0.26%
  • Published 29.01.2019 16:29:00
  • Last modified 21.11.2024 04:00:41

IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow a user with administrative privileges to obtain highly sensitive information. IBM X-Force ID: 154031.

4.9

CVE-2018-1932

  • EPSS 6.04%
  • Published 08.01.2019 16:29:00
  • Last modified 21.11.2024 04:00:37

IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 153175.

6.5

CVE-2018-1859

  • EPSS 0.2%
  • Published 04.01.2019 15:29:00
  • Last modified 21.11.2024 04:00:30

IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user authenticated as an administrator with limited rights to escalate their privileges. IBM X-Force ID: 151258.