CVE-2018-1976 Information disclosure in API Connect
Administrative users can access highly sensitive information via a REST API in IBM API Connect, requiring a patch to prevent data exposure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-1976?
CVE-2018-1976 is a medium-severity vulnerability in Ibm Api Connect, published on 29 Jan 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow a user with administrative privileges to obtain highly sensitive information. IBM X-Force ID: 154031.
Weakness: CWE-200
Which versions are affected by CVE-2018-1976?
It affects 1 product.
Products include Ibm Api Connect.
How do I fix CVE-2018-1976?
No fix has been published for CVE-2018-1976 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-1976 being exploited?
There is no known exploitation of CVE-2018-1976 in the wild and no public exploit code.
Other vulnerabilities in Ibm Api Connect
Sources
Also known as GHSA-4g5q-fwgw-2wj7.