CVE-2014-3036

IBM API Management 3.0.0.0 - Auth Bypass

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67941
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/93302
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21674232
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59044
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1LI78000

Scores

EPSS 0.0129
EPSS Percentile 67.2%

Details

Status published
Products (1)
ibm/api_management 3.0.0.0
Published Jun 08, 2014
Tracked Since Feb 18, 2026