CVE-2019-4052: High severity IBM API Connect vulnerability
Published Mar 22, 2019
·Updated
IBM API Connect 2018.1 and 2018.4.1.2 apis can be leveraged by unauthenticated users to discover login ids of registered users. IBM X-Force ID: 156544.
Affected Software
1 affected component
IBM API Connect>=2018.1.0<=2018.4.1.2
Remediation
Patch Available
Event History
Mar 22, 2019
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-4052?
CVE-2019-4052 is classified as a medium severity vulnerability due to its potential for user enumeration by unauthenticated users.
2
How do I fix CVE-2019-4052?
To fix CVE-2019-4052, update IBM API Connect to a version higher than 2018.4.1.2.
3
What systems are affected by CVE-2019-4052?
CVE-2019-4052 affects IBM API Connect versions 2018.1 and 2018.4.1.2.
4
Can CVE-2019-4052 be exploited remotely?
Yes, CVE-2019-4052 can be exploited remotely by unauthenticated users.
5
What impact does CVE-2019-4052 have on user security?
CVE-2019-4052 allows attackers to discover login IDs of registered users, thereby compromising user confidentiality.