CVE-2018-2007

CVE-2018-2007 affects IBM API Connect (2018.1 and 2018.4.1.2) where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. The bulletin lists affected versions as IBM API Connect | 5.0.0.0–5.0.8.5, with remediation in VRMF 5.0.8.6 fixpack (L...

IBM API Connect Information Disclosure Vulnerability (CNVD-2019-12760)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. A security vulnerability exists in IBM API Connect versions 2018.1 through 2018.4.1.2. An attack...

CVE-2019-4052

CVE-2019-4052 affects IBM API Connect versions 2018.1–2018.4.1.2. The vulnerability allows unauthenticated users to discover login IDs of registered users via API access, constituting an information-disclosure flaw. IBM’s IBMX-Force/NVD entries confirm an impact on login-id exposure with CVSS v3....