CVE-2017-1555

Published: Sep 25, 2017Modified: May 13, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application plan. IBM X-Force ID: 131545.

Affected (15)

Products: Ibm: Api Connect

Ibm

1 product

Api Connect

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Api Connect	Version 5.0.0.0
Ibm Api Connect	Version 5.0.0.1
Ibm Api Connect	Version 5.0.1.0
Ibm Api Connect	Version 5.0.2.0
Ibm Api Connect	Version 5.0.3.0
Ibm Api Connect	Version 5.0.4.0
Ibm Api Connect	Version 5.0.5.0
Ibm Api Connect	Version 5.0.6.0
Ibm Api Connect	Version 5.0.6.1
Ibm Api Connect	Version 5.0.6.2
Ibm Api Connect	Version 5.0.6.3
Ibm Api Connect	Version 5.0.6.4
Ibm Api Connect	Version 5.0.7.0
Ibm Api Connect	Version 5.0.7.1
Ibm Api Connect	Version 5.0.7.2