Skip to content
OpenAdvisories

Package · Maven

io.apiman:apiman-manager-api-rest-impl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.4
    CVE-2023-28640

    Permissions bypass in Apiman could enable authenticated attacker to unpermitted API Key

    Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess the URL, …

    apiman apiman io.apiman:apiman-manager-api-rest-impl Maven
  • Medium 6.5
    CVE-2022-47551

    Apiman has potential permissions bypass

    Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security…

    io.apiman:apiman-manager-api-rest-impl Maven