PT-2014-5035
CVE-2014-3036
·
تاريخ النشر
2014-06-08
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM API Management version 3.0.0.0
Description
The issue allows remote attackers to bypass intended restrictions on topology access and obtain sensitive information when basic authentication is used for APIs.
Recommendations
For IBM API Management version 3.0.0.0, consider disabling basic authentication for APIs until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾