9.0
Critical
CVE-2019-4008 API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak
Description
API Connect V2018.1 through 2018.4.1.1 is impacted by access token leak. Authorization tokens in some URLs can result in the tokens being written to log files. IBM X-Force ID: 155626.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| API Connect | 2018.4.1.1 | No fix stated |
| API Connect | 2018.1 | No fix stated |