Vulnerability Details CVE-2019-4294
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.0%
CVSS Severity
CVSS v3 Score 8.4
CVSS v2 Score 7.2
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160701
- https://www.ibm.com/support/docview.wss?uid=ibm10887005
- https://www.ibm.com/support/docview.wss?uid=ibm10958933
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160701
- https://www.ibm.com/support/docview.wss?uid=ibm10887005
- https://www.ibm.com/support/docview.wss?uid=ibm10958933
Products affected by CVE-2019-4294
-
cpe:2.3:a:ibm:datapower_gateway:10.0.2.0
-
cpe:2.3:a:ibm:datapower_gateway:10.5.0.1
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.0
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.1
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.2
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.3
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.4
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.5
-
cpe:2.3:a:ibm:datapower_gateway:2018.4.1.6
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.0
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.1
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.10
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.11
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.12
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.13
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.14
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.15
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.2
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.3
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.4
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.5
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.6
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.7
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.8
-
cpe:2.3:a:ibm:datapower_gateway:7.6.0.9
-
cpe:2.3:a:ibm:datapower_gateway:7.7.0.0
-
cpe:2.3:a:ibm:datapower_gateway:7.7.1.0
-
cpe:2.3:a:ibm:datapower_gateway:7.7.1.1
-
cpe:2.3:a:ibm:datapower_gateway:7.7.1.2
-
cpe:2.3:a:ibm:datapower_gateway:7.7.1.3
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.0
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.1
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.10
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.11
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.12
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.2
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.3
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.4
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.5
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.6
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.7
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.8
-
cpe:2.3:a:ibm:mq_appliance:8.0.0.9
-
cpe:2.3:a:ibm:mq_appliance:9.1.0.0
-
cpe:2.3:a:ibm:mq_appliance:9.1.0.1
-
cpe:2.3:a:ibm:mq_appliance:9.1.0.2
-
cpe:2.3:a:ibm:mq_appliance:9.1.1
-
cpe:2.3:a:ibm:mq_appliance:9.1.2