CVE-2018-1991: Infoleak
Published May 22, 2019
·Updated
IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying software stack in CMC UI headers. IBM X-Force ID: 154284.
Affected Software
1 affected component
IBM API Connect>=5.0.0.0<=5.0.8.6
Event History
May 22, 2019
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1991?
CVE-2018-1991 has been classified with a medium severity level due to the risk of exposing sensitive information.
2
How do I fix CVE-2018-1991?
To fix CVE-2018-1991, upgrade IBM API Connect to a version later than 5.0.8.6.
3
What impact does CVE-2018-1991 have on IBM API Connect?
CVE-2018-1991 allows attackers to gain access to sensitive information that can reveal details about the underlying software stack.
4
Which versions of IBM API Connect are affected by CVE-2018-1991?
CVE-2018-1991 affects IBM API Connect versions from 5.0.0.0 to 5.0.8.6.
5
Is there a workaround for CVE-2018-1991 if I cannot upgrade?
There are no specific workarounds mentioned for CVE-2018-1991; upgrading is the recommended solution.