Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-1532

No fix known EPSS <1%CVSS 4.3

IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430.

Published 2018-05-31 · CVE record · OSV

Products: ibm api_connect