CVE-2015-0149

Published: Mar 18, 2015Modified: May 6, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

The developer portal in IBM API Management 3.0 before 3.0.4.1 does not properly restrict access to the public and private APIs, which allows remote authenticated users to obtain sensitive information or modify data via unspecified API calls.

Affected (5)

Products: Ibm: Api Management

Ibm

1 product

Api Management

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Api Management	Version 3.0.0.0
Ibm Api Management	Version 3.0.2.0
Ibm Api Management	Version 3.0.2.1
Ibm Api Management	Version 3.0.3.0
Ibm Api Management	Version 3.0.4.0

Related CWEs

CWE-264

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21696693

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21696693

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.