CVE-2018-1712: CSRF
IBM API Connect's Developer Portal 5.0.0.0 through 5.0.8.3 is vulnerable to Server Side Request Forgery. An attacker, using specially crafted input parameters can trick the server into making potentially malicious calls within the trusted network. IBM X-Force ID: 146370.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1712?
CVE-2018-1712 is rated as a medium severity vulnerability due to the risk of Server Side Request Forgery.
How do I fix CVE-2018-1712?
To mitigate CVE-2018-1712, it is recommended to apply the latest security patches provided by IBM for the affected versions.
What versions of IBM API Connect are affected by CVE-2018-1712?
The affected versions of IBM API Connect range from 5.0.0.0 to 5.0.8.3.
What type of vulnerability is CVE-2018-1712?
CVE-2018-1712 is classified as a Server Side Request Forgery (SSRF) vulnerability.
Can CVE-2018-1712 be exploited remotely?
Yes, an attacker can exploit CVE-2018-1712 remotely by sending specially crafted input parameters to the server.