CVE-2018-1674

https://notcve.org/view.php?id=CVE-2018-1674

IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109. IBM Business Process Manager, de la versión 8.5 a la 8.6 y de la versión 18.0.0.0 a la 18.0.0.1, es vulnerable a una in. Un atacante remoto podría enviar instrucciones SQL especialmente manipuladas que podrían permitir que el atacante viese, añadiese, modificase o borrase información en la base de datos del backend. • http://www.securitytracker.com/id/1041717 https://exchange.xforce.ibmcloud.com/vulnerabilities/145109 https://www.ibm.com/support/docview.wss?uid=ibm10720035 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •