Design/Logic Flaw

2019-06-2516:15:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.

CPENameOperatorVersion
api_connectge2018.1.0
api_connectle2018.4.1.5

CPE	Name	Operator	Version
	api_connect	ge	2018.1.0
	api_connect	le	2018.4.1.5

References

www.securityfocus.com/bid/108907

exchange.xforce.ibmcloud.com/vulnerabilities/155150

www.ibm.com/support/docview.wss?uid=ibm10882932