API Connect has addressed the following vulnerability. An API Connect user can get access to internal environment and sensitive API details to which they are not authorized.
CVE(s): CVE-2018-1468
Affected product(s) and affected version(s):
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015968
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/140399
The post IBM Security Bulletin: API Connect is affected by an information leakage vulnerability (CVE-2018-1468) appeared first on IBM PSIRT Blog.
Affected API Connect | Affected Versions |
IBM API Connect | 5.0.8.1-5.0.8.2 |
from IBM Product Security Incident Response Team https://ift.tt/2HGqe9x
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.