High · 7.2 CVE-2020-4638 EUVD-2020-25885GHSA-7pvf-3gfc-6366

IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organizat…

Published Sep 3, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.

Affected products

Vendor	Product	Affected	Fixed
IBM	API Connect	2018.4.1.0, 2018.4.12	—

References

https://www.ibm.com/support/pages/node/6324751
ibm-api-cve20204638-priv-escalation (185508) vdb-entry