CVE-2018-2009

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...

CVE-2018-2009

IBM API Connect v2018.1–2018.4.1 is affected by an information-disclosure vulnerability in the consumer API. Any registered user can enumerate other users across all orgs, including email IDs and names. The CVE-2018-2009 issue has CVSSv3 base score 6.5 (confidentiality impact: HIGH). Affected ver...

Security Bulletin: API Connect is affected by an information disclosure vulnerability in the consumer API (CVE-2018-2009)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-2009 DESCRIPTION: IBM API Connect v2018 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs,...