Authorization

2021-03-0217:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.

CPENameOperatorVersion
cloud_application_performance_managementeq8.1.4
cloud_application_performance_managementeq8.1.4

CPE	Name	Operator	Version
	cloud_application_performance_management	eq	8.1.4
	cloud_application_performance_management	eq	8.1.4

References

exchange.xforce.ibmcloud.com/vulnerabilities/187861

www.ibm.com/support/pages/node/6417137