{"id":"CVE-2014-3036","aliases":["EUVD-2014-3057","GHSA-wqcv-4fmp-436f"],"status":"published","title":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for...","description":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01289,"percentile":0.7038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2014-06-08T23:00:00Z","modified":"2026-06-17T00:07:30Z","products":[{"vendor":"ibm","product":"api_management"}],"references":[{"url":"http://www.securityfocus.com/bid/67941","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/93302","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21674232","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/59044","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1LI78000","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3036"},{"url":"https://github.com/advisories/GHSA-wqcv-4fmp-436f"}],"sources":{"cve":[{"id":"CVE-2014-3036","description":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.","status":"published","published":"2014-06-08T23:00:00Z","modified":"2024-08-06T10:28:46.363Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-3057","description":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.","status":"published","published":"2014-06-08T23:00:00Z","modified":"2024-08-06T10:28:46Z","updated_at":"2026-11-03T01:57:12.248788Z"}],"ghsa":[{"id":"GHSA-wqcv-4fmp-436f","title":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for...","description":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.","status":"published","published":"2022-05-17T01:25:59Z","modified":"2023-02-03T05:04:16Z","updated_at":"2026-11-02T14:53:31.323466Z"}],"nvd":[{"id":"CVE-2014-3036","description":"Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.","status":"published","published":"2014-06-08T23:55:02.43Z","modified":"2026-06-17T00:07:30.247Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:54.464139Z"}]}}