Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect IBM Cloud App Management V2018.4.1

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM® Cloud App Management V2018.4.1. IBM® Cloud App Management has addressed the applicable CVEs in a later version. Vulnerability Details CVEID: CVE-2018-12549 DESCRIPTION: Eclipse OpenJ9 could allow a remote...

CVE-2018-1990

IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283...

CVE-2018-1990

CVE-2018-1990 affects IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1. A specially crafted HTTP request could allow an attacker to obtain sensitive configuration information. The IBM advisory (F2097F23A…) documents a CVSS v3 base score of 5.3 (MEDIUM) and confirms the affected versio...

CVE-2018-1990: Exposure of Sensitive Information to an Unauthorized Actor

IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283...

Security Bulletin: A vulnerability in IBM Cloud App Management V2018 could allow an attacker to obtain sensitive configuration information

Summary There is a vulnerability in IBM® Cloud App Management V2018. IBM Cloud App Management V2018 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM® Cloud App Management has addressed the applicable CVE in a later version...

Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect IBM Cloud App Management V2018.4.1

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM® Cloud App Management V2018.4.1. IBM® Cloud App Management has addressed the applicable CVEs in a later version. Vulnerability Details CVEID: CVE-2018-3139 DESCRIPTION: An unspecified vulnerability in Orac...

Information disclosure

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...