Vulnerability Description
IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation link. IBM X-Force ID: 185508.
CVSS Score
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Api Connect | >= 2018.4.1.0, <= 2018.4.1.12 |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/185508VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6324751Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/185508VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6324751Vendor Advisory
FAQ
What is CVE-2020-4638?
CVE-2020-4638 is a vulnerability with a CVSS score of 7.2 (HIGH). IBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organization can escalate privileges by manipulating the invitation li...
How severe is CVE-2020-4638?
CVE-2020-4638 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-4638?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Api Connect.