CVE-2017-1386

IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160...

CVE-2017-1386: Weak Password Requirements

IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160...

PT-2017-13154

Name of the Vulnerable Software and Affected Versions IBM API Connect version 5.0.0.0 Description The issue allows a user to bypass policy restrictions and create non-compliant passwords, which could be intercepted and decrypted using man-in-the-middle techniques. Recommendations For IBM API...

CVE-2017-1328

IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID:...

IBM API Connect Security Bypass Vulnerability

IBM API Connect is an API management solution that addresses all key aspects of the API lifecycle in on-premise and cloud environments. A security bypass vulnerability exists in IBM API Connect. An attacker could use this vulnerability to bypass certain security restrictions and perform...

CVE-2017-1322: Improper Restriction of XML External Entity Reference

IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918...

CVE-2017-1328: Undefined Security Weakness

IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID:...

PT-2017-12967

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 5.0.0.0 through 5.0.6.0 Description The issue is caused by improper handling of security policy, allowing a remote attacker to bypass security restrictions of the API. An attacker could exploit this by crafting a...

PT-2017-12962

Name of the Vulnerable Software and Affected Versions IBM API Connect version 5.0.6.0 Description The issue allows a remote attacker to perform an XML External Entity Injection XXE attack when the software processes XML data. This could lead to the exposure of highly sensitive information or the...

Information disclosure

IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002...

CVE-2017-1379

IBM API Connect 5.0.0.0–5.0.7.1 is affected by CVE-2017-1379, an information disclosure vulnerability caused by improper handling of Developer Portal requests. Remote attacker could obtain sensitive information. IBM’s bulletin lists affected versions and provides remediation via iFixes containing...

IBM API Connect Information Disclosure Vulnerability

IBM API Connect is a suite of integrated solutions for managing the API lifecycle and IBM NPM is a suite of NodeJS package management and distribution tools. An information disclosure vulnerability exists in IBM API Connect. A remote attacker could exploit this vulnerability to obtain sensitive...

CVE-2017-1379: Exposure of Sensitive Information to an Unauthorized Actor

IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002...

PT-2017-13104

Name of the Vulnerable Software and Affected Versions IBM API Connect version 5.0.0.0 Description The issue is caused by improper handling of requests to the Developer Portal, which could allow a remote attacker to obtain sensitive information. Recommendations For IBM API Connect version 5.0.0.0,...

Input validation

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the...

CVE-2017-1161: Improper Input Validation

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the...

PT-2017-12133

Name of the Vulnerable Software and Affected Versions IBM API Connect version 5.0.6.0 Description The issue is caused by improper validation of URLs for the Developer Portal, allowing a remote attacker to execute arbitrary commands on the system. By crafting a malicious URL, an attacker could...

CVE-2016-3012

IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...

CVE-2016-3012

IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...

CVE-2016-3012

IBM API Connect aka APIConnect before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials...