IBM Edge Application Manager Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in IBM Edge Application Manager version 4.5. This vulnerability allows authenticated attackers to send unauthorized requests from the system, which could lead to network enumeration or facilitate other types of attacks.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or other attacks.

Remediation

Users are advised to upgrade to the latest version of IBM Edge Application Manager. The upgrade can be done using the available Docker images from Docker Hub or the IBM Entitled Registry. For detailed update instructions, please refer to the IBM Edge Application Manager 4.5 upgrade documentation.