IBM DataPower Gateway Code Injection Vulnerability

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface (API), web, service-oriented architecture (SOA), B2B and cloud workloads. The platform protects, integrates, and optimizes access across channels using a dedicated gateway platform.IBM DataPower Gateway is vulnerable to a code injection vulnerability that stems from IBM DataPower Gateway’s vulnerability to cross-site request forgery, which could be exploited by an attacker to perform malicious and unauthorized actions transmitted from a user trusted by the site.