CVE-2019-4051

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-04-08 · updated 2026-06-17
Weakness: CWE-200

Description

Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542.

Affected products

IBM API Connect: from 2018.1.0 through 2018.4.1.3

References

http://www.securityfocus.com/bid/107841
https://exchange.xforce.ibmcloud.com/vulnerabilities/156542
https://www.ibm.com/support/docview.wss?uid=ibm10879395
http://www.securityfocus.com/bid/107841
https://exchange.xforce.ibmcloud.com/vulnerabilities/156542
https://www.ibm.com/support/docview.wss?uid=ibm10879395

Get alerted when CVE-2019-4051 or the next vulnerability affects your stack