CVE-2019-4294

Published: Aug 20, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. IBM X-Force ID: 16188.

Affected (6)

Products: Ibm: Datapower Gateway, Mq Appliance

Ibm

2 products

Datapower Gateway

Mq Appliance

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Datapower Gateway	2018.4.1.0 ≤ version ≤ 2018.4.1.6
Ibm Datapower Gateway	7.6.0.0 ≤ version ≤ 7.6.0.15
Ibm Datapower Gateway	version < 2018.4.1.7
Ibm Mq Appliance	8.0.0.0 ≤ version ≤ 8.0.0.12
Ibm Mq Appliance	9.1.1 ≤ version ≤ 9.1.2
Ibm Mq Appliance	9.1.0.0 ≤ version ≤ 9.1.0.2