IBM API Connectの更新、重大な脆弱性を多数修正
Summary
IBM API Connectの10.0.8系と12.1系で、認証なしで悪用できるものを含むCVSS 9.0以上の脆弱性10件が公表されました。API基盤を運用する組織は修正版へ更新し、公開範囲と侵害の跡も確認してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
IBM API Connectの10.0.8系と12.1系で、認証なしで悪用できるものを含むCVSS 9.0以上の脆弱性10件が公表されました。API基盤を運用する組織は修正版へ更新し、公開範囲と侵害の跡も確認してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| IBMAPI Connect |
12.1.0.0 – 12.1.1.2→ Not listed 10.0.8.0 – 10.0.8.12→ Not listed |
Not listed Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web ibm.com
- web ibm.com
- web nvd.nist.gov
- web github.com