PT-2019-17050 · Ibm · Ibm Api Connect
CVE-2019-4382
·
Publicado
2019-06-25
·
Atualizado
2023-01-30
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM API Connect versions 5.0.0.0 through 5.0.8.6
Description
The issue allows an unauthorized user to obtain sensitive information about system users by using specially crafted HTTP requests.
Recommendations
For versions 5.0.0.0 through 5.0.8.6, update to a version that contains a fix for this issue to prevent unauthorized access to sensitive user information.
Correção
Cleartext Transmission of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Api Connect