PT-2018-15063

CVE-2018-1973

·

Published

2018-12-20

·

Updated

2019-10-09

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM API Connect versions 5.0.0.0 through 5.0.8.4
Description The issue allows a user with limited 'API Administrator' level access to escalate their privileges to full 'Administrator' level access. This is achieved through the members functionality.
Recommendations For versions 5.0.0.0 through 5.0.8.4, consider restricting access to the members functionality to prevent privilege escalation until a fix is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-269: Improper Privilege Management
Related identifiers
CVE-2018-1973
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com