Description
IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack. IBM X-Force ID: 193247.
CVSS breakdown
CVSS 3.0
Confidentiality
High
Availability
High
Attack Vector
Local
Scope
Unchanged
Integrity
High
Attack Complexity
Low
User Interaction
None
Privileges Required
High
RC
Changed
E
Unchanged
RL
O
Affected products
- ibm / DataPower Gateway2018.4.1.0 – 2018.4.1.0
- ibm / DataPower Gateway10.0.0.0 – 10.0.0.0
- ibm / DataPower Gateway10.0.1.1 – 10.0.1.1
- ibm / DataPower Gateway2018.4.1.14 – 2018.4.1.14