Code injection

2019-03-2219:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.

CPENameOperatorVersion
api_connectge2018.1.0
api_connectle2018.4.1.2

CPE	Name	Operator	Version
	api_connect	ge	2018.1.0
	api_connect	le	2018.4.1.2

References

www.ibm.com/support/docview.wss?uid=ibm10874248

www.securityfocus.com/bid/107559

exchange.xforce.ibmcloud.com/vulnerabilities/156544