IBM Security Bulletin: API Connect minimatch CVE-2017-1556

API Connect has addressed the following vulnerability. API Connect is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang.

CVE(s): CVE-2017-1556

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2y3VRBA
X-Force Database: http://ift.tt/2w553rM

The post IBM Security Bulletin: API Connect minimatch CVE-2017-1556 appeared first on IBM PSIRT Blog.

Affected API Connect	Affected Versions
IBM API Connect	5.0.7.0-5.0.7.2

from IBM Product Security Incident Response Team http://ift.tt/2y1PgYf