Vulnerability in IBM API Management

CVE-2014-3036

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.

EPSS: 0.013 (67.3th percentile) — read the EPSS interpretation.

Affected products

Ibm Api_management — versions 3.0.0.0
N/a — versions n/a

References

psirt@us.ibm.com (vdb-entry, x_refsource_BID)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)