Access Control Weakness in IBM API Management
CVE-2015-0149

Currently unrated

Key Information:

Vendor

IBM
Status
Api Management
Vendor
CVE Published:
18 March 2015

What is CVE-2015-0149?

The developer portal in IBM API Management prior to version 3.0.4.1 fails to enforce proper access controls on both public and private APIs. This oversight can lead to remote authenticated users gaining unauthorized access to sensitive information or modifying data through undisclosed API calls, posing a significant risk to data integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg1LI78430
vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg21696693
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.