IBM Security Bulletin: IBM DataPower Gateways is affected by an XXE vulnerability (CVE-2018-1669)
Sep 21, 2018 9:01 am EDT
Categorized: High Severity
Share this post:
IBM DataPower Gateways has addressed the following vulnerability: CVE-2018-1669
CVE(s): CVE-2018-1669
Affected product(s) and affected version(s):
| Affected WebSphere DataPower Appliances | Affected Versions |
|---|---|
| IBM DataPower Gateway | 7.5.2.0-7.5.2.15 |
| IBM DataPower Gateway CD | CD 7.7.0.0-7.7.1.2 |
| IBM DataPower Gateway | 7.1.0.0-7.1.0.23 |
| IBM DataPower Gateway | 7.2.0.0-7.2.0.21 |
| IBM DataPower Gateway | 7.5.0.0-7.5.0.16 |
| IBM DataPower Gateway | 7.5.1.0-7.5.1.15 |
| IBM DataPower Gateway | 7.6.0.0-7.6.0.8 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10730489
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144950
from IBM Product Security Incident Response Team https://ift.tt/2prlfhi