CVE-2017-1161

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer…

published April 17, 2017

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal. By crafting a malicious URL, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. IBM X-Force ID: 122956.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01495 · 74.0th percentile
Published
2017-04-17T21:00Z
EPSS history
Timeline
  • 17 APR 21:00Z
    IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer…
    cvelistv5