CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Input Validation
Summary: ibm api connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of urls for the developer portal. by crafting a malicious url, an attacker could exploit this vulnerability to execute arbitrary commands on the system with the privileges of the www-data user. ibm x-force id: 122956.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-04-17
Last Modified Date: 2017-04-25