{"id": "CVE-2015-0149", "bulletinFamily": "NVD", "title": "CVE-2015-0149", "description": "The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.", "published": "2015-03-18T10:59:00", "modified": "2015-03-18T14:52:00", "cvss": {"score": 5.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0149", "reporter": "cve@mitre.org", "references": ["http://www-01.ibm.com/support/docview.wss?uid=swg21696693", "http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430"], "cvelist": ["CVE-2015-0149"], "type": "cve", "lastseen": "2019-05-29T18:14:38", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "26a6cf5c2627a138ab1ecd573e98cfcf"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "8b8b4b431bc648bd9635964439baacac"}, {"key": "cpe23", "hash": "fb6a26afcbff795453e0cbc9142e3cb4"}, {"key": "cvelist", "hash": "4b504d2cac03bfc4e4ff5dfff1978351"}, {"key": "cvss", "hash": "1c99f5bdb1f29030e5711d023cd9c33f"}, {"key": "cvss2", "hash": "3ea7371366674e264a57f2ee7c2e04d6"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "fa12e087f68642fcaefafba0d4583885"}, {"key": "description", "hash": "cd7d8f6fb075ae463aecf52633ec9447"}, {"key": "href", "hash": "e4a909434998e0595dc5c2c50cfa0126"}, {"key": "modified", "hash": "7dfbd928e802467a44e2ddb6a6c6d227"}, {"key": "published", "hash": "2bdf2a0eded6b5f978b4fbfc866c4d5f"}, {"key": "references", "hash": "8c7c130e5e4a247b647c661c2ba59c23"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "7ef4e4e2d27386aa5a7680f984184dca"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "daef44524a50467c8051a976716718b505314faa68791b377405319e89644442", "viewCount": 0, "enchantments": {"score": {"value": 5.0, "vector": "NONE", "modified": "2019-05-29T18:14:38"}, "dependencies": {"references": [{"type": "kaspersky", "idList": ["KLA10503"]}], "modified": "2019-05-29T18:14:38"}, "vulnersScore": 5.0}, "objectVersion": "1.3", "cpe": ["cpe:/a:ibm:api_management:3.0.2.0", "cpe:/a:ibm:api_management:3.0.0.0", "cpe:/a:ibm:api_management:3.0.3.0", "cpe:/a:ibm:api_management:3.0.2.1", "cpe:/a:ibm:api_management:3.0.4.0"], "affectedSoftware": [{"name": "ibm api_management", "operator": "eq", "version": "3.0.2.1"}, {"name": "ibm api_management", "operator": "eq", "version": "3.0.3.0"}, {"name": "ibm api_management", "operator": "eq", "version": "3.0.4.0"}, {"name": "ibm api_management", "operator": "eq", "version": "3.0.2.0"}, {"name": "ibm api_management", "operator": "eq", "version": "3.0.0.0"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:ibm:api_management:3.0.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:api_management:3.0.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:api_management:3.0.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:api_management:3.0.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:api_management:3.0.0.0:*:*:*:*:*:*:*"], "cwe": ["CWE-264"]}

{"kaspersky": [{"lastseen": "2019-03-21T00:14:21", "bulletinFamily": "info", "description": "### *Detect date*:\n03/24/2015\n\n### *Severity*:\nHigh\n\n### *Description*:\nMultiple serious vulnerabilities have been found in IBM products. \n\n### *Affected products*:\nIBM Bluemix Liberty versions earlier than 1.13-20150209-1122 \nIBM API Management 3 versions earlier 3.0.4.1 \nIBM Content Collector for Email 3 versions earlier than 3.0.0.6-IBM-ICC-Server-IF001 \nIBM Content Collector for Email 4 before 4.0.0.3-IBM-ICC-Server-IF001 \nIBM Tivoli Directory Server (ITDS) 6 versions earlier than 6.0.0.73-ISS-ITDS-IF0073 \nIBM Tivoli Directory Server (ITDS) 6.1 versions earlier than 6.1.0.66-ISS-ITDS-IF0066 \nIBM Tivoli Directory Server (ITDS) 6.2 versions earlier than 6.2.0.42-ISS-ITDS-IF0042 \nIBM Tivoli Directory Server (ITDS) 6.3 versions earlier than 6.3.0.35-ISS-ITDS-IF0035 \nIBM Security Directory Server (ISDS) 6.3.1 versions earlier than 6.3.1.9-ISS-ISDS-IF0009 \nIBM Tivoli Identity Manager Active Directory adapter versions earlier than 5.1.4 \nIBM Security Identity Manager Active Directory adapter versions earlier than 6.0.14 \nIBM Rational ClearCase 8.0.0 before 8.0.0.14 \nIBM Rational ClearCase 8.0.1 before 8.0.1.7\n\n### *Solution*:\nUpdate to latest version\n\n### *Impacts*:\nOSI \n\n### *Related products*:\n[IBM Tivoli Directory Server](<https://threats.kaspersky.com/en/product/IBM-Tivoli-Directory-Server/>)\n\n### *CVE-IDS*:\n[CVE-2014-8923](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8923>)1.9High \n[CVE-2015-0138](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0138>)4.3High \n[CVE-2015-0149](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0149>)5.5High \n[CVE-2015-0146](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0146>)2.1High \n[CVE-2014-6134](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6134>)1.2High \n[CVE-2015-0178](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0178>)4.3High", "modified": "2019-03-07T00:00:00", "published": "2015-03-24T00:00:00", "id": "KLA10503", "href": "https://threats.kaspersky.com/en/vulnerability/KLA10503", "title": "\r KLA10503Multiple vulnerabilities in IBM products ", "type": "kaspersky", "cvss": {"score": 5.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:NONE/"}}]}