CVE-2019-4294
20.08.2019, 19:15
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.
| Vendor | Product | Version |
|---|---|---|
| ibm | datapower_gateway | 𝑥 < 2018.4.1.7 |
| ibm | datapower_gateway | 7.6.0.0 ≤ 𝑥 ≤ 7.6.0.15 |
| ibm | datapower_gateway | 2018.4.1.0 ≤ 𝑥 ≤ 2018.4.1.6 |
| ibm | mq_appliance | 8.0.0.0 ≤ 𝑥 ≤ 8.0.0.12 |
| ibm | mq_appliance | 9.1.0.0 ≤ 𝑥 ≤ 9.1.0.2 |
| ibm | mq_appliance | 9.1.1 ≤ 𝑥 ≤ 9.1.2 |
𝑥
= Vulnerable software versions
References