{"id":"CVE-2026-17215","kind":"vulnerability","aliases":["CVE-2026-17215"],"related":[],"title":"IBM API Connect: verbose error messages leak internal system details","description":"IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to verbose error messages. Error responses contain more information about the system than necessary, which could help an attacker learn about the environment.","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 return error responses that contain more system information than necessary. A remote attacker with a valid account can use those details to learn about the environment.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["api-gateway","ibm-api-connect","infrastructure"],"not_affected_if":["unknown"],"how_to_check":"- Confirm the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2.","fix":null,"status":"open","published_at":"2026-11-07T05:18:30+00:00","first_seen_at":"2026-11-07T05:46:00+00:00","triaged_at":"2026-11-07T05:54:25+00:00","updated_at":"2026-11-07T05:54:25+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-07T05:54:25Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM API Connect: verbose error messages leak internal system details","impact":"low","summary":"IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 return error responses that contain more system information than necessary. A remote attacker with a valid account can use those details to learn about the environment.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-api-connect","api-gateway"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker learns internal environment details from error messages","analyst_note":"Check IBM's security bulletin for CVE-2026-17215 for the fixed version and any setting that controls error verbosity.","how_to_check":"- Confirm the installed IBM API Connect version against the affected ranges 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2.\n- unknown for any other check; the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running IBM API Connect in the affected version ranges, where authenticated users can reach API error responses. The sources do not say which deployment settings expose more detail, so whether a given install is affected beyond the version range is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000687,"input_tokens":4255,"output_tokens":522,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-17215':13A,16A '-2026':12A,15A '10.0.8.0':29B,65C '10.0.8.12':31B,67C '12.1.0.0':33B,69C '12.1.1.2':35B,71C 'account':52B 'allow':73C 'api':2A,18B,22B,26B,63C 'api-gateway':17B 'attack':48B,77C,101C 'authent':76C 'connect':3A,23B,27B,64C 'contain':40B,89C 'could':72C,98C 'cve':11A,14A 'detail':10A,56B 'due':82C 'environ':61B,105C 'error':5A,37B,85C,87C 'gateway':19B 'help':99C 'ibm':1A,21B,25B,62C 'ibm-api-connect':20B 'inform':43B,81C,91C 'infrastructur':24B 'intern':8A 'leak':7A 'learn':58B,102C 'messag':6A,86C 'necessari':45B,96C 'obtain':79C 'remot':47B,75C 'respons':38B,88C 'return':36B 'sensit':80C 'system':9A,42B,94C 'use':54B 'valid':51B 'verbos':4A,84C 'version':28B","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM API Connect in the affected version ranges, where authenticated users can reach API error responses. The sources do not say which deployment settings expose more detail, so whether a given install is affected beyond the version range is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apigateway","ibmapiconnect","infrastructure","medium"],"campaign_type":null,"search_a":"'-17215':13A,16A '-2026':12A,15A 'api':2A 'connect':3A 'cve':11A,14A 'detail':10A 'error':5A 'ibm':1A 'intern':8A 'leak':7A 'messag':6A 'system':9A 'verbos':4A","search_b":"'10.0.8.0':29B '10.0.8.12':31B '12.1.0.0':33B '12.1.1.2':35B 'account':52B 'api':18B,22B,26B 'api-gateway':17B 'attack':48B 'connect':23B,27B 'contain':40B 'detail':56B 'environ':61B 'error':37B 'gateway':19B 'ibm':21B,25B 'ibm-api-connect':20B 'inform':43B 'infrastructur':24B 'learn':58B 'necessari':45B 'remot':47B 'respons':38B 'return':36B 'system':42B 'use':54B 'valid':51B 'version':28B","search_c":"'10.0.8.0':65C '10.0.8.12':67C '12.1.0.0':69C '12.1.1.2':71C 'allow':73C 'api':63C 'attack':77C,101C 'authent':76C 'connect':64C 'contain':89C 'could':72C,98C 'due':82C 'environ':105C 'error':85C,87C 'help':99C 'ibm':62C 'inform':81C,91C 'learn':102C 'messag':86C 'necessari':96C 'obtain':79C 'remot':75C 'respons':88C 'sensit':80C 'system':94C 'verbos':84C","first_public_at":"2026-11-07T05:18:30+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-17215","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-17215","severity":null,"published_at":"2026-11-07T05:18:30+00:00","modified_at":"2026-11-07T05:18:30+00:00","first_seen_at":"2026-11-07T05:46:00+00:00","fetched_at":"2026-11-07T05:46:00+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}