Required CVE Record Information
Description
IBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused by improper validation of a request property. By submitting suitable payloads, an attacker could exploit this vulnerability to induce the Connections server to attack other systems. IBM X-Force ID: 148946.
CVSS 1 Total
Score | Severity | Version | Vector String |
---|---|---|---|
4.9 | MEDIUM | 3.0 | CVSS:3.0/A:L/AC:H/AV:N/C:L/I:N/PR:L/S:C/UI:N/E:U/RC:C/RL:O |
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://www.ibm.com/support/docview.wss?uid=ibm10731207 x_transferred
- exchange.xforce.ibmcloud.com: ibm-connections-cve20181791-esi(148946) vdb-entryx_transferred