CVE-2018-1712

IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.

Score

CVSS 3.0 9.9 Critical

Status

Modified - psirt@us.ibm.com

Published

2018-08-16

Last modified

2024-09-16

Weaknesses

CWE-352

Affected products

• Api Connect (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/146370
• https://www-01.ibm.com/support/docview.wss?uid=ibm10716169