CVE-2018-2011

IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an…

Medium · published June 25, 2019

CVSS v3.0
5.3
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/A:N/PR:N/AC:L/UI:N/I:N/S:U/AV:N/C:L/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.02772 · 86.2th percentile
Published
2019-06-25T15:45Z
EPSS history
Timeline
  • 25 JUN 15:45Z
    IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an…
    cvelistv5