IBM Security Bulletin: IBM API Connect Developer Portal is affected by arbitrary PHP code execution vulnerability in Drupal (CVE-2019-6340)

IBM API Connect has addressed the following vulnerability.

CVE(s): CVE-2019-6340

Affected product(s) and affected version(s):

IBM API Connect version 2018.1-2018.4.1.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10873076&myns=swgws&mynp=OCSSMNED&mync=E&cm_sp=swgws-_-OCSSMNED-_-E
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/157313

The post IBM Security Bulletin: IBM API Connect Developer Portal is affected by arbitrary PHP code execution vulnerability in Drupal (CVE-2019-6340) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IVMM7i