Back to overview

CVE-2019-4202

CRITICAL
10.0
CVSS 3.0
Description
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.

Metadata

CVE ID
CVE-2019-4202
State
PUBLISHED
Assigner
ibm
Reserved
2019-01-03 00:00 UTC
Published
2019-04-15 14:55 UTC
Last updated
2024-09-17 00:35 UTC
Vendor / Product
IBM / API Connect
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.0
CVSS:3.0/C:H/I:H/AC:L/UI:N/AV:N/S:C/A:H/PR:N/RL:O/E:U/RC:C
Affected products (1)
VendorProductPlatformVersions
IBM API Connect — 5.0.0.0, 5.0.8.6
Weakness (CWE)
CWESourceDescription
— cna Gain Access
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.0 cna CVSS:3.0/C:H/I:H/AC:L/UI:N/AV:N/S:C/A:H/PR:N/RL:O/E:U/RC:C
References (3)
Back to overview