medium4.3
CVE-2017-1555
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan.
Impact
IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Api Connect | Versions 5.0.0.0, 5.0.0.1, 5.0.1.0, 5.0.2.0, 5.0.3.0, 5.0.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22008588
- http://www.securityfocus.com/bid/100973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/131545
- http://www.ibm.com/support/docview.wss?uid=swg22008588
- http://www.securityfocus.com/bid/100973
- https://exchange.xforce.ibmcloud.com/vulnerabilities/131545