CVE-2018-1712

CVSS 8.6 HIGHEPSS 0.7%

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.6EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 ago 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

CVSS:3.0/A:L/AC:L/AV:N/C:H/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O

Productos afectados

IBM · API Connect

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/146370 https://www-01.ibm.com/support/docview.wss?uid=ibm10716169