CVE-2018-1712 in API Connect

摘要

由 MITRE

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

Be aware that VulDB is the high quality source for vulnerability data.

• 负责: IBM Corporation
• 预定: 2017-12-12
• 披露: 2018-08-16
• 管理: 已接受
• 条目: VDB-122988
• CPE: 准备好
• CWE: CWE-352 (已确认)
• CVSS: 9.9 (NVD)
• EPSS: 0.00713
• KEV: 否
• 活动: 非常低
• 部门: Energy, Chemical, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-1712
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-1712
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-1712/