6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
IBM API Connect has addressed the following vulnerability.
CVEID: CVE-2018-3251 DESCRIPTION: An unspecified vulnerability in Oracle MySQL related to the Server InnoDB component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors.
CVSS Base Score: 6.5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/151565> for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
IBM API Connect version 5.0.0.0-5.0.8.5;2018.1-2018.4.1.1
Affected Product | Addressed in VRMF | APAR | Remediation/First Fix |
---|---|---|---|
IBM API Connect V5.0.0.0 - 5.0.8.5 | 5.0.8.5 iFix | LI80590 |
Addressed in IBM API Connect Developer Portal V5.0.8.5 iFix.
Follow this link and find the “APIConnect-Portal” package with date 20190123 or after.
IBM API Connect V2018.1 - 2018.4.1.1 | 2018.4.1.2 release | LI80590 |
Addressed in IBM API Connect v2018.4.1.2 release.
Follow this link and find the appropriate form factor for your installation: portal or apicup* or ICP for 2018.4.1.2.
None
CPE | Name | Operator | Version |
---|---|---|---|
ibm api connect | eq | 5.0.0.0 | |
ibm api connect | eq | 5.0.8.5 | |
ibm api connect | eq | 2018.1 | |
ibm api connect | eq | 2018.4.1.1 |
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P