7.2
High
CVE-2018-1973 IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves…
Description
IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through the members functionality. IBM X-Force ID: 153914.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| API Connect 5.0 | 5.0.0.0 → 5.0.8.4 | No fix stated |