CVE-2019-4382: Medium severity api connect cli plugins vulnerability
Published Jun 25, 2019
·Updated
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.
Affected Software
1 affected component
IBM API Connect>=5.0.0.0<=5.0.8.6
Remediation
Patch Available
Event History
Jun 25, 2019
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-4382.
2
What is the severity rating of CVE-2019-4382?
The severity rating of CVE-2019-4382 is medium, with a score of 5.3.
3
What is the affected software for CVE-2019-4382?
The affected software for CVE-2019-4382 is IBM API Connect versions 5.0.0.0 through 5.0.8.6.
4
How can an unauthorized user exploit CVE-2019-4382?
An unauthorized user can exploit CVE-2019-4382 by sending specially crafted HTTP requests to obtain sensitive information about the system users.
5
Are there any available fixes or patches for CVE-2019-4382?
Yes, IBM has released a fix for CVE-2019-4382. Please refer to the IBM support documentation for more details.