CVEvulnerability
CVE-2015-0149
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.
Affected configurations
• ibm api management 3.0.0.0
• ibm api management 3.0.2.0
• ibm api management 3.0.2.1
• ibm api management 3.0.3.0
• ibm api management 3.0.4.0
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21696693 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21696693 Patch, Vendor Advisory