Description (CNA)
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potentially carry out SSRF attacks. IBM X-Force ID: 159124.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / API Connect | affected 5.0.0.0; affected 5.0.8.6 |
CWE
No CWE identifiers supplied.
References
- https://www.ibm.com/support/docview.wss?uid=ibm10880569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/159124
- http://www.securityfocus.com/bid/107905
ADP enrichment
No English description supplied.