PT-2019-14308 · Mulesoft · Mule Ce/Ee+1

Publicado 2019-12-02 · Atualizado 2019-12-13 · CVE-2019-15631

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions MuleSoft Mule CE/EE versions 3.x MuleSoft API Gateway versions 2.x

Description A Remote Code Execution issue allows remote attackers to execute arbitrary code.

Recommendations For MuleSoft Mule CE/EE versions 3.x, update to a version released after October 31, 2019. For MuleSoft API Gateway versions 2.x, update to a version released after October 31, 2019.

Correção

Identificadores relacionados

CVE-2019-15631

Produtos afetados

Apigateway

Mule Ce/Ee

Referências · 3

• https://help.salesforce.com/articleView?id=000351827&language=en_US&type=1&mode=1 · Nota
• https://osv.dev/vulnerability/CVE-2019-15631 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15631 · Nota de Segurança