CVE-2018-1661: CSRF
IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144887.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-1661?
CVE-2018-1661 is a vulnerability in IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 that allows for cross-site request forgery attacks.
What is the severity of CVE-2018-1661?
CVE-2018-1661 has a severity rating of 8.8 (high).
How does CVE-2018-1661 impact IBM DataPower Gateways?
CVE-2018-1661 allows attackers to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Which versions of IBM DataPower Gateways are affected by CVE-2018-1661?
IBM DataPower Gateways versions 7.5, 7.5.1, 7.5.2, and 7.6 are affected by CVE-2018-1661.
How can I fix the vulnerability in IBM DataPower Gateways (CVE-2018-1661)?
To fix the vulnerability, update to a version that is not affected by CVE-2018-1661. Refer to IBM's documentation for specific version information.