CVE-2019-4610

CVE-2019-4610 affects IBM Cloud Private Identity and Access Management. The IBM bulletin states the issue arises from use of an API key that grants access to a resource type, enabling an authenticated attacker to access other resources of the same type beyond the intended scope. Affected product/...

Security Bulletin: A Security Vulnerability affects IBM Cloud Private Identity and Access Management (CVE-2019-4610)

Summary A security vulnerability affects IBM Cloud Private Identity and Access Management Vulnerability Details CVEID: CVE-2019-4610 DESCRIPTION: IBM Cloud private could provide weaker than expected security, caused by the use of an API key granting access to pultiple resources. An authenticated...