Input validation

2022-03-1020:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. By sending a specially crafted JSON message, an attacker could exploit this vulnerability to modify structure and fields. IBM X-Force ID: 209824.

CPENameOperatorVersion
datapower_gatewayeq10.0.2.0
datapower_gatewayeq10.0.3.0
datapower_gatewayge10.0.1.0
datapower_gatewayle10.0.1.5
datapower_gatewayge2018.4.1.0
datapower_gatewayle2018.4.1.18

Name	Operator	Version
datapower_gateway	eq	10.0.2.0
datapower_gateway	eq	10.0.3.0
datapower_gateway	ge	10.0.1.0
datapower_gateway	le	10.0.1.5
datapower_gateway	ge	2018.4.1.0
datapower_gateway	le	2018.4.1.18