CVE-2018-1712 in API Connect

Riassunto

di MITRE

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: IBM Corporation
• Prenotare: 12/12/2017
• Divulgazione: 16/08/2018
• Moderazione: accettato
• Voce: VDB-122988
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 9.9 (NVD)
• EPSS: 0.00713
• KEV: no
• Attività: molto basso
• Settore: Energy, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-1712
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-1712
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-1712/