2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"API Connect","vendor":"IBM","versions":[{"status":"affected","version":"5.0.0.0"},{"status":"affected","version":"5.0.8.4"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*","matchCriteriaId":"6DCD43B4-58AE-4C38-A8C5-489210E7D7AD","versionEndIncluding":"5.0.8.4","versionStartIncluding":"5.0.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow a user with administrative privileges to obtain highly sensitive information. IBM X-Force ID: 154031."},{"lang":"es","value":"IBM API Connect, desde la versión 5.0.0.0 hasta la 5.0.8.4, se ha visto impactado por una divulgación de información sensible mediante una API REST que podría permitir que un usuario con privilegios administrativos obtenga información altamente sensible. IBM X-Force ID: 154031."}],"id":"CVE-2018-1976","lastModified":"2026-06-17T01:52:06.290","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":1.2,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-01-29T16:29:00.530","references":[{"source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/106792"},{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154031"},{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/docview.wss?uid=ibm10843130"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/106792"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/154031"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/docview.wss?uid=ibm10843130"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|