Design/Logic Flaw

The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls...

PT-2015-4505

Name of the Vulnerable Software and Affected Versions IBM API Management versions 3.0 through 3.0.4.1 Description The developer portal in IBM API Management does not properly restrict access to the public and private APIs. This allows remote authenticated users to obtain sensitive information or...

CVE-2015-0149: Undefined Security Weakness

The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls...