CVE-2017-1386

Published: Jul 31, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques. IBM X-Force ID: 127160.

Affected (23)

Products: Ibm: Api Connect, Api Management

Ibm

2 products

Api Connect

Api Management

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Api Connect	Version 5.0.0.0
Ibm Api Connect	Version 5.0.0.1
Ibm Api Connect	Version 5.0.1.0
Ibm Api Connect	Version 5.0.2.0
Ibm Api Connect	Version 5.0.3.0
Ibm Api Connect	Version 5.0.4.0
Ibm Api Connect	Version 5.0.5.0
Ibm Api Connect	Version 5.0.6.0
Ibm Api Connect	Version 5.0.6.1
Ibm Api Connect	Version 5.0.6.2
Ibm Api Connect	Version 5.0.7.0

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Api Management	Version 4.0.0.0
Ibm Api Management	Version 4.0.0.1
Ibm Api Management	Version 4.0.1.0
Ibm Api Management	Version 4.0.2.0
Ibm Api Management	Version 4.0.2.1
Ibm Api Management	Version 4.0.3.0
Ibm Api Management	Version 4.0.4.0
Ibm Api Management	Version 4.0.4.1
Ibm Api Management	Version 4.0.4.2
Ibm Api Management	Version 4.0.4.3
Ibm Api Management	Version 4.0.4.4
Ibm Api Management	Version 4.0.4.5