CVE-2018-1638
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483.
- Score
- CVSS 3.0 8.1 High
- Status
- Modified - psirt@us.ibm.com
- Published
- 2018-07-31
- Last modified
- 2024-09-16
- Weaknesses
- CWE-287
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/144483
- https://www.ibm.com/support/docview.wss?uid=ibm10718415
