CVE-2019-4155 Privilege escalation in API Connect

What is CVE-2019-4155?

CVE-2019-4155 is a high-severity vulnerability in Ibm Api Connect, published on 8 Apr 2019. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID Connect (OIDC) user registry. IBM X-Force ID: 158544.

Which versions are affected by CVE-2019-4155?

It affects 1 product.

Products include Ibm Api Connect.

How do I fix CVE-2019-4155?

No fix has been published for CVE-2019-4155 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-4155 being exploited?

There is no known exploitation of CVE-2019-4155 in the wild and no public exploit code.

Other vulnerabilities in Ibm Api Connect

• CVE-2019-4202 Command injection in API Connect Critical 10.0
• CVE-2025-13915 Authentication bypass in IBM API Connect Critical 9.8
• CVE-2018-1469 Command injection in API Connect Critical 9.8
• CVE-2026-9074 IBM API Connect SQL Injection Critical 9.1
• CVE-2019-4008 Information disclosure in API Connect Critical 9.0

All Ibm Api Connect vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wcw6-86f6-3583.