CVE-2017-1386 IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID:...
MediumCVSS 5.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm api connect | = 5.0.0.0 | No fix listed |
| ibm api connect | = 5.0.0.1 | No fix listed |
| ibm api connect | = 5.0.1.0 | No fix listed |
| ibm api connect | = 5.0.2.0 | No fix listed |
| ibm api connect | = 5.0.3.0 | No fix listed |
| ibm api connect | = 5.0.4.0 | No fix listed |
| ibm api connect | = 5.0.5.0 | No fix listed |
| ibm api connect | = 5.0.6.0 | No fix listed |
| ibm api connect | = 5.0.6.1 | No fix listed |
| ibm api connect | = 5.0.6.2 | No fix listed |
| ibm api connect | = 5.0.7.0 | No fix listed |
| ibm api management | = 4.0.0.0 | No fix listed |
| ibm api management | = 4.0.0.1 | No fix listed |
| ibm api management | = 4.0.1.0 | No fix listed |
| ibm api management | = 4.0.2.0 | No fix listed |
| ibm api management | = 4.0.2.1 | No fix listed |
| ibm api management | = 4.0.3.0 | No fix listed |
| ibm api management | = 4.0.4.0 | No fix listed |
| ibm api management | = 4.0.4.1 | No fix listed |
| ibm api management | = 4.0.4.2 | No fix listed |
| ibm api management | = 4.0.4.3 | No fix listed |
| ibm api management | = 4.0.4.4 | No fix listed |
| ibm api management | = 4.0.4.5 | No fix listed |
| ibm api connect | = 5.0.7.1 | No fix listed |
References
- www.ibm.com vendor-advisory
- 100008 third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com vdb-entry