PT-2018-15063 · Ibm · Ibm Api Connect
CVE-2018-1973
·
Publicado
2018-12-20
·
Atualizado
2019-10-09
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
IBM API Connect versions 5.0.0.0 through 5.0.8.4
Description
The issue allows a user with limited 'API Administrator' level access to escalate their privileges to full 'Administrator' level access. This is achieved through the members functionality.
Recommendations
For versions 5.0.0.0 through 5.0.8.4, consider restricting access to the members functionality to prevent privilege escalation until a fix is available.
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Api Connect