Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-4051

Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542.

Published

2019-04-08T15:29:02.497

Last Modified

2024-11-21T04:43:05.473

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 5.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	api_connect	≤ 2018.4.1.3	Yes

References

http://www.securityfocus.com/bid/107841 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/156542 VDB Entry, Vendor Advisory ([email protected])
https://www.ibm.com/support/docview.wss?uid=ibm10879395 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/107841 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/156542 VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/docview.wss?uid=ibm10879395 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)