Denial of Service Vulnerability in IBM API Connect
CVE-2021-29715

6.5MEDIUM

Key Information:

Vendor
IBM
Status
Api Connect
Vendor
CVE Published:
26 August 2021

Summary

IBM API Connect versions 5.0.0.0 through 5.0.8.11 contain a vulnerability that allows unauthorized remote users to gain access to sensitive information or initiate denial of service attacks. This issue arises from improperly secured open ports within the application, potentially exposing critical data and affecting service availability.

Affected Version(s)

API Connect 5.0.0.0

API Connect 5.0.8.11

References

https://www.ibm.com/support/pages/node/6483653
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/201018
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.