Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-4992 EUVD-2020-26239GHSA-26m2-3jc9-5rqh

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an attacker to execute m…

Published Aug 17, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: DataPower Gateway

Description

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 192737.

Affected products

VendorProductAffectedFixed
IBM DataPower Gateway 2018.4.1.0, 2018.4.1.16 —

References