Loading HuntDB...

GHSA-r9hf-x4r3-rxpr

GitHub Security Advisory

⚠ Unreviewed LOW Has CVE

Advisory Details

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453.

Related CVEs

Key Information

GHSA ID
GHSA-r9hf-x4r3-rxpr
Published
May 24, 2022 5:03 PM
Last Modified
May 24, 2022 5:03 PM
CVSS Score
2.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 1, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.