Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2019-4294

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM MQ Appliance

  • 8.0.0.3affected
  • 8.0.0.4affected
  • 8.0.0.5affected
  • 8.0.0.6affected
  • 8.0.0.0affected
  • 8.0.0.8affected
  • 8.0.0.10affected
  • 9.1.0.0affected
  • 8.0.0.11affected
  • 9.1.0.1affected
  • 9.1.1affected
  • 8.0.0.1affected
  • 8.0.0.7affected
  • 8.0.0.9affected
  • 8.0.0.2affected
  • 8.0.0.12affected
  • 9.1.0.2affected
  • 9.1.2affected

IBM DataPower Gateway

  • 7.6.0.0affected
  • 2018.4.1.0affected
  • 2018.4.1.6affected
  • 7.6.0.15affected
  • CDaffected

References