Lucene search

IbmCVE-2019-4051

HistoryApr 08, 2019 - 3:29 p.m.

CVE-2019-4051

2019-04-0815:29:02

CWE-200

ibm

web.nvd.nist.gov

ibm

api connect

system specification

disclosure

cve-2019-4051

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542.

Affected configurations

Nvd

Vulners

Node

ibmapi_connectRange2018.1.0–2018.4.1.3

VendorProductVersionCPE
ibmapi_connect*cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	api_connect	*	cpe:2.3:a:ibm:api_connect::::::::

CNA Affected

[
  {
    "product": "API Connect",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "2018.1"
      },
      {
        "status": "affected",
        "version": "2018.4.1.3"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107841

exchange.xforce.ibmcloud.com/vulnerabilities/156542

www.ibm.com/support/docview.wss?uid=ibm10879395

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.002

Percentile

58.7%

JSON

Related for CVE-2019-4051