CVE-2018-2009

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API

Medium · published March 11, 2019

CVSS v3.0
6.5
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01648 · 76.2th percentile
Published
2019-03-11T22:00Z
EPSS history
Timeline
  • 11 MAR 22:00Z
    IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API
    cvelistv5