CVE-2019-4008

API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@us.ibm.com

Published

2019-02-07

Last modified

2024-09-17

Weaknesses

CWE-532

Affected products

• Api Connect (Ibm)

References

• http://www.securityfocus.com/bid/106961
• https://exchange.xforce.ibmcloud.com/vulnerabilities/155626
• https://www.ibm.com/support/docview.wss?uid=ibm10869772