PT-2015-5545 · Ibm · Ibm Websphere Mq

Publicado 2015-09-14 · Atualizado 2016-12-22 · CVE-2015-2013

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.0.1 before 7.0.1.13

Description The issue allows remote attackers to cause a denial of service, resulting in a channel-agent abend and process outage. This can be achieved by sending a crafted selection string in an MQI call.

Recommendations For IBM WebSphere MQ version 7.0.1 before 7.0.1.13, update to version 7.0.1.13 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-2013

Produtos afetados

Ibm Websphere Mq

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21962479 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2013 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV73860 · Aviso do Fabricante
• http://securitytracker.com/id/1033449 · Nota