Description (CNA)
IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / API Connect | affected 5.0.1.0; affected 5.0.0.0; affected 5.0.0.1; affected 5.0.2.0; affected 5.0.5.0; affected 5.0.6.0; affected 5.0.6.1; affected 5.0.6.2; affected 5.0.7.0; affected 5.0.7.1; affected 5.0.3.0; affected 5.0.4.0; affected 5.0.7.2; affected 5.0.6.3; affected 5.0.6.4; affected 5.0.8.0; affected 5.0.8.1; affected 5.0.6.5; affected 5.0.6.6; affected 5.0.8.2; affected 5.0.8.3 |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/146370
- https://www-01.ibm.com/support/docview.wss?uid=ibm10716169
ADP enrichment
No English description supplied.