description: IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system commands using specially crafted HTTP requests. IBM X-Force ID: 140605.
problem types: Gain Access
affected:
{
product: API Connect
vendor: IBM
versions:
status: affected, version: 5.0.1.0
status: affected, version: 5.0.0.0
status: affected, version: 5.0.2.0
status: affected, version: 5.0.5.0
status: affected, version: 5.0.6.0
status: affected, version: 5.0.6.1
status: affected, version: 5.0.6.2
status: affected, version: 5.0.7.0
status: affected, version: 5.0.7.1
status: affected, version: 5.0.3.0
status: affected, version: 5.0.4.0
status: affected, version: 5.0.7.2
status: affected, version: 5.0.6.3
status: affected, version: 5.0.6.4
status: affected, version: 5.0.8.0
status: affected, version: 5.0.8.1
status: affected, version: 5.0.6.5
status: affected, version: 5.0.6.6
status: affected, version: 5.0.8.2
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:U/UI:N
version: 3.0
]