CVE-2018-1973

IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through…

High · published December 20, 2018

CVSS v3.0
7.2
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through the members functionality. IBM X-Force ID: 153914.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:H/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.02296 · 83.0th percentile
Published
2018-12-20T14:00Z
EPSS history
Timeline
  • 20 DEC 14:00Z
    IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through…
    cvelistv5