org.apache.archiva:archiva-configuration (1.2-m1), org.apache.archiva:archiva-consumer-api (1.2-m1) +13 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.2-m1)

org.apache.archiva:archiva-common MAVEN version 1.2-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.2-m1 - org.apache.archiva:archiva-consumer-api...

org.apache.archiva:archiva-configuration (1.2.1), org.apache.archiva:archiva-consumer-api (1.2.1) +32 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.2.1)

org.apache.archiva:archiva-common MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.2.1 - org.apache.archiva:archiva-consumer-api 1.2....

org.apache.archiva:archiva-configuration (1.2.2), org.apache.archiva:archiva-consumer-api (1.2.2) +11 more potentially affected by CVE-2022-40308 via org.apache.archiva:archiva-common (1.2.2)

org.apache.archiva:archiva-common MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.2.2 - org.apache.archiva:archiva-consumer-api 1.2....

org.apache.archiva:archiva-cli (1.3.1), org.apache.archiva:archiva-configuration (1.3.1) +12 more potentially affected by CVE-2022-40308 via org.apache.archiva:archiva-common (1.3.1)

org.apache.archiva:archiva-common MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-cli 1.3.1 - org.apache.archiva:archiva-configuration 1.3.1 -...

org.apache.archiva:archiva-cli (1.3.2), org.apache.archiva:archiva-configuration (1.3.2) +12 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.3.2)

org.apache.archiva:archiva-common MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-cli 1.3.2 - org.apache.archiva:archiva-configuration 1.3.2 -...

org.apache.archiva:archiva-cli (1.3.4), org.apache.archiva:archiva-configuration (1.3.4) +12 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.3.4)

org.apache.archiva:archiva-common MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-cli 1.3.4 - org.apache.archiva:archiva-configuration 1.3.4 -...

org.apache.archiva:archiva-cli (1.3.5), org.apache.archiva:archiva-configuration (1.3.5) +12 more potentially affected by CVE-2022-40308 via org.apache.archiva:archiva-common (1.3.5)

org.apache.archiva:archiva-common MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-cli 1.3.5 - org.apache.archiva:archiva-configuration 1.3.5 -...

org.apache.archiva:archiva-artifact-converter (1.4-m2), org.apache.archiva:archiva-checksum (1.4-m2) +25 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.4-m2)

org.apache.archiva:archiva-common MAVEN version 1.4-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-artifact-converter 1.4-m2 - org.apache.archiva:archiva-checksum...

org.apache.archiva:archiva-configuration (1.1.4), org.apache.archiva:archiva-consumer-api (1.1.4) +10 more potentially affected by CVE-2022-40308 via org.apache.archiva:archiva-common (1.1.4)

org.apache.archiva:archiva-common MAVEN version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.1.4 - org.apache.archiva:archiva-consumer-api 1.1....

org.apache.archiva:archiva-configuration (1.1.3), org.apache.archiva:archiva-consumer-api (1.1.3) +10 more potentially affected by CVE-2022-40309 via org.apache.archiva:archiva-common (1.1.3)

org.apache.archiva:archiva-common MAVEN version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.archiva:archiva-common and may be impacted: - org.apache.archiva:archiva-configuration 1.1.3 - org.apache.archiva:archiva-consumer-api 1.1....

Information disclosure

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...

CVE-2018-2009

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...

PT-2019-9983

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 2018.1 through 2018.4.1 Description The issue allows any registered user to obtain a list of all other users in all other organizations, including their email IDs and names, through the consumer API. Recommendations Fo...

CVE-2018-2009: Exposure of Sensitive Information to an Unauthorized Actor

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148...

Security Bulletin: API Connect is affected by an information disclosure vulnerability in the consumer API (CVE-2018-2009)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-2009 DESCRIPTION: IBM API Connect v2018 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs,...