Skip to content
OpenAdvisories
High · 8.4 CVE-2018-1789 EUVD-2018-12368GHSA-c3j4-jv4j-wgmf

IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request fo…

Published Sep 7, 2018 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: API Connect

Description

IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939.

Affected products

VendorProductAffectedFixed
IBM API Connect 2018.2.1, 2018.2.2, 2018.2.3, 2018.2.4, 2018.1.0, 2018.2.5, 2018.2.6, 2018.2.7, 2018.2.8, 2018.2.9, 2018.2.10, 2018.2.11, 2018.3.1, 2018.3.2, 2018.3.3, 2018.3.4 —

References