CVE-2017-1161

2017-04-1721:00:00

ibm

www.cve.org

EPSS

0.002

Percentile

51.7%

JSON

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956.

CNA Affected

[
  {
    "product": "API Connect",
    "vendor": "IBM Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.6.0"
      }
    ]
  }
]

References

www.ibm.com/support/docview.wss?uid=swg22000316

www.securityfocus.com/bid/97665

EPSS

0.002

Percentile

51.7%

JSON

Related for CVELIST:CVE-2017-1161