CVE-2018-1638
31.07.2018, 13:29
IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | api_connect | 5.0.0.0 ≤ 𝑥 ≤ 5.0.8.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration