PT-2018-12663 · Ibm · Ibm Api Connect'S Developer Portal

Publicado 2018-04-04 · Atualizado 2019-10-09 · CVE-2018-1469

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions IBM API Connect Developer Portal versions 5.0.0.0 through 5.0.8.2

Description The issue allows an unauthenticated attacker to execute system commands using specially crafted HTTP requests.

Recommendations For versions 5.0.0.0 through 5.0.8.2, update to a version that contains a fix for this issue to prevent system command execution by unauthenticated attackers.

Correção

Identificadores relacionados

CVE-2018-1469

Produtos afetados

Ibm Api Connect'S Developer Portal

Referências · 4

• http://ibm.com/support/docview.wss?uid=swg22014940 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1469 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140605 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1469 · Aviso do Fabricante