CVE-2018-1789 IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939.
CriticalCVSS 9.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm api connect | >= 2018.1.0, <= 2018.3.4 | No fix listed |
| ibm api connect | = 2018.2.1 | No fix listed |
| ibm api connect | = 2018.2.2 | No fix listed |
| ibm api connect | = 2018.2.3 | No fix listed |
| ibm api connect | = 2018.2.4 | No fix listed |
| ibm api connect | = 2018.1.0 | No fix listed |
| ibm api connect | = 2018.2.5 | No fix listed |
| ibm api connect | = 2018.2.6 | No fix listed |
| ibm api connect | = 2018.2.7 | No fix listed |
| ibm api connect | = 2018.2.8 | No fix listed |
| ibm api connect | = 2018.2.9 | No fix listed |
| ibm api connect | = 2018.2.10 | No fix listed |
| ibm api connect | = 2018.2.11 | No fix listed |
| ibm api connect | = 2018.3.1 | No fix listed |
| ibm api connect | = 2018.3.2 | No fix listed |
| ibm api connect | = 2018.3.3 | No fix listed |
| ibm api connect | = 2018.3.4 | No fix listed |
References
- ibm-api-cve20181789-ssrf(148939) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory