Command injection

2019-08-2019:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.

CPENameOperatorVersion
datapower_gatewayge2018.4.1.0
datapower_gatewayle2018.4.1.6
datapower_gatewayge7.6.0.0
datapower_gatewayle7.6.0.15
datapower_gatewaylt2018.4.1.7
mq_appliancege9.1.0.0
mq_appliancele9.1.0.2
mq_appliancege8.0.0.0
mq_appliancele8.0.0.12
mq_appliancege9.1.1

Name	Operator	Version
datapower_gateway	ge	2018.4.1.0
datapower_gateway	le	2018.4.1.6
datapower_gateway	ge	7.6.0.0
datapower_gateway	le	7.6.0.15
datapower_gateway	lt	2018.4.1.7
mq_appliance	ge	9.1.0.0
mq_appliance	le	9.1.0.2
mq_appliance	ge	8.0.0.0
mq_appliance	le	8.0.0.12
mq_appliance	ge	9.1.1