Lucene search
IbmCVE-2015-0149HistoryMar 18, 2015 - 10:59 a.m.
CVE-2015-0149
2015-03-1810:59:06
CWE-264
ibm
web.nvd.nist.gov
28
ibm
api management
security
vulnerability
access control
cve-2015-0149
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
AI Score
5.8
Confidence
Low
EPSS
0.001
Percentile
44.4%
The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.
Affected configurations
Node
ibmapi_managementMatch3.0.0.0
ORibmapi_managementMatch3.0.2.0
ORibmapi_managementMatch3.0.2.1
ORibmapi_managementMatch3.0.3.0
ORibmapi_managementMatch3.0.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | api_management | 3.0.0.0 | cpe:2.3:a:ibm:api_management:3.0.0.0:*:*:*:*:*:*:* |
| ibm | api_management | 3.0.2.0 | cpe:2.3:a:ibm:api_management:3.0.2.0:*:*:*:*:*:*:* |
| ibm | api_management | 3.0.2.1 | cpe:2.3:a:ibm:api_management:3.0.2.1:*:*:*:*:*:*:* |
| ibm | api_management | 3.0.3.0 | cpe:2.3:a:ibm:api_management:3.0.3.0:*:*:*:*:*:*:* |
| ibm | api_management | 3.0.4.0 | cpe:2.3:a:ibm:api_management:3.0.4.0:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2015-03-18 10:59:00
nvd
nvd
CVE-2015-0149
2015-03-18 10:59:06
cvelist
cvelist
CVE-2015-0149
2015-03-18 10:00:00
kaspersky
kaspersky
KLA10503 Multiple vulnerabilities in IBM products
2015-03-24 00:00:00
CVSS2
5.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
AI Score
5.8
Confidence
Low
EPSS
0.001
Percentile
44.4%
Related for CVE-2015-0149