CVE-2022-47551
Medium
Description
Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security model of Apiman versions before 3.0.0.Final. Because of this, 3.0.0.Final is not affected by the vulnerability.
SeverityMedium
CVSS6.5
Exploit probability—
ProductApiman
PublishedDec 20, 2022
First seenDec 20, 2022
Weakness typeCWE-276CWE-276
How to fix
Update
- io.apiman:apiman-manager-api-rest-impl3.0.0.Final or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apiman apiman | 1.5.7 ≤ v ≤ 2.2.3 | — |
| io.apiman:apiman-manager-api-rest-implMaven | 1.5.7 ≤ v < 3.0.0.Final | 3.0.0.Final |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.