IBM Security Bulletin: API Connect Developer Portal is affected by a PHP vulnerability (CVE-2017-7272)

IBM API Connect has addressed the following vulnerability.  PHP is vulnerable to server-side request forgery, caused by a flaw in the fsockopen() function. By using a specially crafted argument, an attacker could exploit this vulnerability to conduct a Server Side Request Forgery (SSRF) attack.

CVE(s): CVE-2017-7272

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22016607
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/123821

The post IBM Security Bulletin: API Connect Developer Portal is affected by a PHP vulnerability (CVE-2017-7272) appeared first on IBM PSIRT Blog.

Affected IBM API Connect	Affected Versions
IBM API Connect	5.0.0.0-5.0.8.3

from IBM Product Security Incident Response Team https://ift.tt/2KTYPOw