CVE-2019-4051
Summary
| CVE | CVE-2019-4051 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-04-08 15:29:00 UTC |
| Updated | 2019-04-10 16:29:00 UTC |
| Description | Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Api Connect | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM API Connect CVE-2019-4051 Information Disclosure Vulnerability | BID | www.securityfocus.com | |
| Security Bulletin: API Connect V2018 is impacted by sensitive information disclosure (CVE-2019-4051) | CONFIRM | www.ibm.com | Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | VDB Entry, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.