10.0
Critical
CVE-2019-4202 IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection
Description
IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to the system. IBM X-Force ID: 159123.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| API Connect 5.0 | 5.0.0.0 → 5.0.8.6 | No fix stated |