CVE-2020-4638

IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation

High · published September 3, 2020

CVSS v3.0
7.2
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/I:H/AC:L/S:U/C:H/AV:N/PR:H/A:H/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01715 · 77.2th percentile
Published
2020-09-03T13:55Z
EPSS history
Timeline
  • 03 SEP 13:55Z
    IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation
    cvelistv5