CVE-2019-4444

5.5 mediumEPSS 0.3%

IBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials used for registration. IBM X-Force ID: 163453.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-12-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:api_connect

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/163453
https://www.ibm.com/support/pages/node/1126833
https://exchange.xforce.ibmcloud.com/vulnerabilities/163453
https://www.ibm.com/support/pages/node/1126833

Check your stack JSON