8.4
High
CVE-2018-1789 IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a…
Description
IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-Force ID: 148939.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| API Connect 2018.3 | 2018.3.1 → 2018.3.4 | No fix stated |
| API Connect 2018.2 | 2018.2.1 → 2018.2.11 | No fix stated |
| API Connect | 2018.1.0 | No fix stated |