IBM Security Bulletin: IBM API Connect is impacted by a Drupal 8 vulnerability (CVE-2018-14773)

IBM API Connect has fixed the following vulnerability. API Connect is impacted by vulnerabilities addressed in the Drupal 8 advisory https://ift.tt/2OCwDCD

CVE(s): CVE-2018-14773

Affected product(s) and affected version(s):

Affected Product	Affected Versions
API Connect	2018.1.0 – 2018.3.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10719697
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147835

The post IBM Security Bulletin: IBM API Connect is impacted by a Drupal 8 vulnerability (CVE-2018-14773) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2N5whY0