CVE-2016-0379

Опубликовано: 26 сент. 2016

Источник: nvd

CVSS3: 3.1

CVSS2: 3.5

EPSS Низкий

Описание

IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service (channel outage) by leveraging queue-manager rights.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21984565
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93146
http://www-01.ibm.com/support/docview.wss?uid=swg21984565
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93146

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_mq:7.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.5.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:7.5.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.0032

Низкий

3.1 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-19

Связанные уязвимости

GHSA-c2cr-xw74-6hfq