IBM Security Bulletin: Weaker than expected security in IBM API Connect (CVE-2017-1386)

IBM API Connect has addressed the following vulnerability which allows the possibility of bypassing password policy.

CVE(s): CVE-2017-1386

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2vb0UBO
X-Force Database: http://ift.tt/2w3efIV

The post IBM Security Bulletin: Weaker than expected security in IBM API Connect (CVE-2017-1386) appeared first on IBM PSIRT Blog.

Affected API Connect	Affected Versions
IBM API Connect	5.0.0.0-5.0.7.1
IBM API Management	4.0.0.0-4.0.4.5

from IBM Product Security Incident Response Team http://ift.tt/2vaAj7X