Privilege escalation

2020-09-0314:15:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

IBM API Connect’s API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.

CPENameOperatorVersion
api_connectge2018.4.1.0
api_connectle2018.4.1.12

CPE	Name	Operator	Version
	api_connect	ge	2018.4.1.0
	api_connect	le	2018.4.1.12

References

exchange.xforce.ibmcloud.com/vulnerabilities/185508

www.ibm.com/support/pages/node/6324751