PT-2018-12663 · Ibm · Ibm Api Connect'S Developer Portal

Published 2018-04-04 · Updated 2019-10-09 · CVE-2018-1469

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions IBM API Connect Developer Portal versions 5.0.0.0 through 5.0.8.2

Description The issue allows an unauthenticated attacker to execute system commands using specially crafted HTTP requests.

Recommendations For versions 5.0.0.0 through 5.0.8.2, update to a version that contains a fix for this issue to prevent system command execution by unauthenticated attackers.

Fix

Related Identifiers

CVE-2018-1469

Affected Products

Ibm Api Connect'S Developer Portal

References · 4

• http://ibm.com/support/docview.wss?uid=swg22014940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1469 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140605 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1469 · Vendor Advisory