CVE-2016-3012 IBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm api connect | <= 5.0.2.0 | No fix listed |
| ibm network path manager | <= 2.1.1.9 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- 92417 third-party-advisory vdb-entry