CVE PROGRAM SOURCE RECORD8.2 High

CVE-2019-4437

IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X-force ID: 162947.

Status: Published
Published: 2019-08-20
Updated: 2024-09-16
Assigning organization: ibm

Description

IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X-force ID: 162947.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM API Connect

2018.1affected
2018.4.1.6affected

References

http://www.ibm.com/support/docview.wss?uid=ibm10960876 ↗
https://exchange.xforce.ibmcloud.com/vulnerabilities/162947 ↗