Description
IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Developer Portal. IBM X-Force ID: 127002.
Metrics
CVSS 3.0 7.5/10
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| IBM | API Connect | 5.0.0.0; 5.0.6.0; 5.0.6.1; 5.0.6.2; 5.0.7.0; 5.0.7.1 |
References
- http://www.ibm.com/support/docview.wss?uid=swg22004714Patch, Vendor Advisory
- http://www.securityfocus.com/bid/99063Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/127002VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22004714Patch, Vendor Advisory
- http://www.securityfocus.com/bid/99063Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/127002VDB Entry, Vendor Advisory
Timeline
- Published
- Jun 15, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified