Medium · 5.3 CVE-2018-2011 EUVD-2018-13866GHSA-rg86-3c4j-wcqh

IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request tha…

Published Jun 25, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.

Affected products

Vendor	Product	Affected	Fixed
IBM	API Connect	2018.1, 2018.4.1.5	—

References

https://www.ibm.com/support/docview.wss?uid=ibm10882932
ibm-api-cve20182011-info-disc (155150) vdb-entry
108907 vdb-entry