The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them.

computer vulnerability bulletin CVE-2018-2011

IBM API Connect: information disclosure via HTTP Request

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via HTTP Request of IBM API Connect, in order to obtain sensitive information.
Vulnerable systems: IBM API Connect.
Severity of this threat: 2/4.
Consequences of an attack: data reading.
Pirate's origin: intranet client.
Creation date: 13/06/2019.
Références of this weakness: CVE-2018-2011, ibm10882932, VIGILANCE-VUL-29528.

Description of the vulnerability

An attacker can bypass access restrictions to data via HTTP Request of IBM API Connect, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

Computer vulnerabilities tracking service

Vigil@nce provides networks vulnerabilities alerts. The Vigil@nce vulnerability database contains several thousand vulnerabilities. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. Each administrator can customize the list of products for which he wants to receive vulnerability alerts.