CVE-2017-1773

Published: Jan 31, 2018Modified: Nov 21, 2024

4.0

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Force ID: 136817.

Affected (6)

Products: Ibm: Datapower Gateway

Ibm

1 product

Datapower Gateway

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Datapower Gateway	From 7.1.0.0 to 7.1.0.20
Ibm Datapower Gateway	From 7.2.0.0 to 7.2.0.17
Ibm Datapower Gateway	From 7.5.0.0 to 7.5.0.11
Ibm Datapower Gateway	From 7.5.1.0 to 7.5.1.10
Ibm Datapower Gateway	From 7.5.2.0 to 7.5.2.10
Ibm Datapower Gateway	From 7.6.0.0 to 7.6.0.3