腾讯网

IBM API Connect关键漏洞可导致身份验证绕过

IBM将API ...
至顶网

API网关漏洞

IBM紧急呼吁用户修补API Connect平台中的关键漏洞CVE-2025-13915，该漏洞可能允许远程攻击者绕过身份验证。漏洞影响10.0.8.0至10.0.8.5版本及10.0.11.0版本，无需用户交互即可获得未授权访问。专家指出这不仅是安全缺陷，更暴露了企业架构中的信任假设问题。IBM已提供临时修复程序，建议无法安装修复的用户禁用开发者门户的自助注册功能。

IBM warns of critical API Connect auth bypass vulnerability

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could ...
The Hacker News

Critical CVSS 9.8 Flaw Found in IBM API Connect Authentication System

IBM disclosed a critical CVSS 9.8 authentication bypass in IBM API Connect that could allow remote access; patches are now ...
InfoWorld

Critical vulnerability in IBM API Connect could allow authentication bypass

Rated 9.8 out of 10 in severity, the flaw could allow a remote attacker to gain unauthorized access to applications.
Techzine Europe

IBM warns of critical flaw in API Connect

IBM is urging customers to immediately patch a critical vulnerability in API Connect. The flaw allows attackers to access ...
TipRanks on MSN

IBM warns of critical API flaw that could allow hackers to bypass authentication

Tech giant IBM ($IBM) is urging customers to quickly fix a serious security flaw in its API Connect software, which is used by companies to manage ...