CVE-2019-4437: Infoleak
First published: Tue Aug 20 2019(Updated: )
IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X-force ID: 162947.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM API Connect | >=2018.1.0<=2018.4.1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2019-4437.
What is the title of the vulnerability?
The title of the vulnerability is 'IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal se…'
What is the severity of CVE-2019-4437?
The severity of CVE-2019-4437 is high.
How does IBM API Connect 2018.1 through 2018.4.1.6 inadvertently leak sensitive details?
IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger.
What is the IBM X-force ID for this vulnerability?
The IBM X-force ID for this vulnerability is 162947.
What is the affected software for this vulnerability?
The affected software is IBM API Connect 2018.1 through 2018.4.1.6.
Are there any patches available for this vulnerability?
Please refer to the IBM support page for information on available patches.
- collector/nvd-index
- agent/author
- agent/severity
- agent/type
- agent/event
- agent/references
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm api connect
- version/ibm api connect/2018.1.0
- version/ibm api connect/2018.4.1.6