CVE-2014-3036 Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive in...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm api management | = 3.0.0.0 | No fix listed |
References
- 59044 third-party-advisory
- LI78000 vendor-advisory
- www-01.ibm.com vendor-advisory
- 67941 vdb-entry
- ibm-api-cve20143036-info-disc(93302) vdb-entry