6.5
Moyenne
CVE-2018-2009 IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API
Description
IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API. Any registered user can obtain a list of all other users in all other orgs, including email id/names, etc. IBM X-Force ID: 155148.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| API Connect | 2018.4.1 | Pas de correctif indiqué |
| API Connect | 2018.1 | Pas de correctif indiqué |