VULNERABILITY INTELLIGENCE

CVE-2018-1638

CVSS score5.9 MEDIUM
EPSS probability1.75%
CISA KEVNot currently listed
Published2018-07-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

IBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforces it for all other login scenarios. IBM X-Force ID: 144483.

Weakness classification

  • CWE-287: Improper Authentication

Primary references