IBM Security Bulletin: IBM Cloud Private is vulnerable to a host header injection attack

IBM Cloud Private is vulnerable to a host header injection attack

CVE(s): CVE-2018-1943

Affected product(s) and affected version(s):
IBM Cloud Private 3.1.0, 3.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10871656
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/153385

The post IBM Security Bulletin: IBM Cloud Private is vulnerable to a host header injection attack appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2OQkCtC