CVE-2018-1532

IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks…

Medium · published May 31, 2018

CVSS v3.0
4.3
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00963 · 61.1th percentile
Published
2018-05-31T21:00Z
EPSS history
Timeline
  • 31 MAY 21:00Z
    IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks…
    cvelistv5