CVE-2018-1784

Published: Dec 20, 2018

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.0

7.1

HIGH

IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807.

Vendor	Product	Versions
IBM	API Connect	affected `5.0.0.0` affected `5.0.8.4`

CVSS v3.0 Vector

CVSS:3.0/A:N/AC:L/AV:N/C:H/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O

Availability

None

Attack Complexity

Low

Attack Vector

Network

Confidentiality

High

Integrity

Low

Privileges Required

Low

Scope

Unchanged

User Interaction

None

vdb-entry

x_refsource_BID

x_refsource_CONFIRM

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.