PT-2018-6558

CVE-2017-1773

·

Published

2018-01-31

·

Updated

2018-02-15

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: IBM DataPower Gateways versions 7.1, 7.2, 7.5, and 7.6
Description: The issue allows an attacker to use man-in-the-middle techniques to spoof DNS responses, potentially leading to DNS cache poisoning and redirection of Internet traffic.
Recommendations: For IBM DataPower Gateways versions 7.1, 7.2, 7.5, and 7.6, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾