VYPR
Unrated severityNVD Advisory· Published Aug 20, 2019· Updated Sep 16, 2024

CVE-2019-4294

CVE-2019-4294

Description

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Datapower Gatewayllm-fuzzy2 versions
    >=2018.4.1.0 <=2018.4.1.6, >=7.6.0.0 <=7.6.0.15+ 1 more
    • (no CPE)range: >=2018.4.1.0 <=2018.4.1.6, >=7.6.0.0 <=7.6.0.15
    • (no CPE)range: 7.6.0.0
  • IBM/Mq Appliancellm-fuzzy2 versions
    >=8.0.0.0 <=8.0.0.12, >=9.1.0.0 <=9.1.0.2, >=9.1.1 <=9.1.2+ 1 more
    • (no CPE)range: >=8.0.0.0 <=8.0.0.12, >=9.1.0.0 <=9.1.0.2, >=9.1.1 <=9.1.2
    • (no CPE)range: 8.0.0.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.