NetSight
IP …
medium5.9

CVE-2017-1386

IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man …

Impact

IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.

Affected products

VendorProductAffected versions
IbmApi Connect
Versions 5.0.0.0, 5.0.0.1, 5.0.1.0, 5.0.2.0, 5.0.3.0, 5.0.4.0
IbmApi Management
Versions 4.0.0.0, 4.0.0.1, 4.0.1.0, 4.0.2.0, 4.0.2.1, 4.0.3.0

Weakness classification

CWE-521

References