High · 8.8 CVE-2019-4155 EUVD-2019-13762GHSA-wcw6-86f6-3583

IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID…

Published Apr 8, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID Connect (OIDC) user registry. IBM X-Force ID: 158544.

Affected products

Vendor	Product	Affected	Fixed
IBM	API Connect	2018.1, 2018.4.1.3	—

References

http://www.ibm.com/support/docview.wss?uid=ibm10879575
ibm-api-cve20194155-priv-escalation (158544) vdb-entry
107806 vdb-entry