critical10.0
CVE-2019-4202
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection.
Impact
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Api Connect | from 5.0.0.0 through 5.0.8.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/107908
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159123
- https://www.ibm.com/support/docview.wss?uid=ibm10880109
- http://www.securityfocus.com/bid/107908
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159123
- https://www.ibm.com/support/docview.wss?uid=ibm10880109