NetSight
IP …
high7.8

CVE-2019-4294

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1…

Impact

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.

Affected products

VendorProductAffected versions
IbmDatapower Gateway
before 2018.4.1.7
from 7.6.0.0 through 7.6.0.15
from 2018.4.1.0 through 2018.4.1.6
IbmMq Appliance
from 8.0.0.0 through 8.0.0.12
from 9.1.0.0 through 9.1.0.2
from 9.1.1 through 9.1.2

Weakness classification

CWE-78

References