IBM Security Bulletin: XXE injection vulnerability in IBM API Connect (CVE-2017-1322)

An XML External Entity injection (XXE) vulnerability is exposed in IBM API Connect.

CVE(s): CVE-2017-1322

Affected product(s) and affected version(s):

IBM API Connect V5.0.0.0 – V5.0.7.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tBv8tF
X-Force Database: http://ift.tt/2t2jTxA

The post IBM Security Bulletin: XXE injection vulnerability in IBM API Connect (CVE-2017-1322) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2tBuZX3