Server-Side Request Forgery in IBM DataPower Gateway

CVE-2022-31776

What is CVE-2022-31776?

IBM DataPower Gateway versions from 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 are susceptible to a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this weakness to send unauthorized requests from the gateway, which may lead to network enumeration and could be leveraged to carry out additional malicious actions. For more details, please refer to IBM's official support page or the IBM X-Force Exchange.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References