CVE-2017-1161: Input Validation

Published Apr 17, 2017

Updated

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956.

Affected Software

1 affected component

IBM API Connect=5.0.6.0

Event History

Apr 17, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-1161?

CVE-2017-1161 has a critical severity rating due to the potential for remote command execution.

How do I fix CVE-2017-1161?

To fix CVE-2017-1161, upgrade to a patched version of IBM API Connect that addresses the vulnerability.

Who is affected by CVE-2017-1161?

CVE-2017-1161 affects users of IBM API Connect version 5.0.6.0.

What type of attack is associated with CVE-2017-1161?

CVE-2017-1161 is associated with remote command execution attacks due to improper URL validation.

What can an attacker do with CVE-2017-1161?

An attacker exploiting CVE-2017-1161 can execute arbitrary commands on the affected system.