CVE-2021-20440
Published: 15 March 2021
Summary
CVE-2021-20440 is a medium-severity an unspecified weakness vulnerability in Ibm Api Connect. Its CVSS base score is 4.3 (Medium).
Operationally, ranked at the 39.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-7858
Vulnerability details
IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register…
more
themselves as a member of an API provider organization. IBM X-Force ID: 196536.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.