Skip to content
OpenAdvisories
High · 8.4 CVE-2019-4294 EUVD-2019-13901GHSA-82vw-2gf8-mwfr

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 throug…

Published Aug 20, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DataPower Gateway Product: MQ Appliance

Description

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.

Affected products

VendorProductAffectedFixed
IBM MQ Appliance 8.0.0.3, 8.0.0.4, 8.0.0.5, 8.0.0.6, 8.0.0.0, 8.0.0.8, 8.0.0.10, 9.1.0.0, 8.0.0.11, 9.1.0.1, 9.1.1, 8.0.0.1, 8.0.0.7, 8.0.0.9, 8.0.0.2, 8.0.0.12, 9.1.0.2, 9.1.2 —
IBM DataPower Gateway 7.6.0.0, 2018.4.1.0, 2018.4.1.6, 7.6.0.15, CD —

References