PT-2019-18133 · Wso2 · Wso2 Api Manager

Publicado 2019-05-14 · Atualizado 2020-08-24 · CVE-2019-6515

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WSO2 API Manager version 2.6.0

Description An issue was discovered where uploaded documents for API documentation are accessible to unauthenticated users.

Recommendations For WSO2 API Manager version 2.6.0, restrict access to uploaded API documentation to authenticated users only.

Correção

Identificadores relacionados

CVE-2019-6515

Produtos afetados

Wso2 Api Manager

Referências · 5

• https://excellium-services.com/cert-xlm-advisory · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6515 · Nota de Segurança
• https://wso2.com/security-patch-releases/api-manager · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6515 · Aviso do Fabricante
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6515 · Nota