Description (CNA)
IBM API Connect 5.0.0.0, 5.0.8.4, 2018.1 and 2018.3.6 is vulnerable to CSV injection via the developer portal and analytics that could contain malicious commands that would be executed once opened by an administrator. IBM X-Force ID: 148692.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / API Connect | affected 5.0.0.0; affected 2018.1; affected 5.0.8.4; affected 2018.3.6 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/docview.wss?uid=ibm10737867
- https://exchange.xforce.ibmcloud.com/vulnerabilities/148692
ADP enrichment
No English description supplied.