PT-2019-16935 · Ibm · Ibm Api Connect'S Developer Portal

Published 2019-04-08 · Updated 2020-08-24 · CVE-2019-4155

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM API Connect's Developer Portal versions 2018.1 through 2018.4.1.3

Description The issue is related to a privilege escalation vulnerability that occurs when IBM API Connect's Developer Portal is integrated with an OpenID Connect (OIDC) user registry.

Recommendations For versions 2018.1 through 2018.4.1.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-4155

Affected Products

Ibm Api Connect'S Developer Portal

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/158544 · Vendor Advisory
• http://ibm.com/support/docview.wss?uid=ibm10879575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4155 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4155 · Vendor Advisory
• http://securityfocus.com/bid/107806 · Note