CVE-2018-1712

CVSS 8.6 HIGHEPSS 0.7%

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.6EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 ago 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

CVSS:3.0/A:L/AC:L/AV:N/C:H/I:L/PR:N/S:U/UI:N/E:U/RC:C/RL:O

Produtos afetados

IBM · API Connect

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/146370 https://www-01.ibm.com/support/docview.wss?uid=ibm10716169