Описание
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626.
Ссылки
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
- PatchVendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2018.1.0 (включая) до 2018.4.1.1 (включая)
cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00458
Низкий
9 Critical
CVSS3
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-532
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626.
EPSS
Процентиль: 63%
0.00458
Низкий
9 Critical
CVSS3
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-532