PT-2017-9915 · Ibm · Ibm Websphere Mq

Publicado 2017-02-22 · Atualizado 2017-03-02 · CVE-2016-8986

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 8.0

Description The issue allows an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests.

Recommendations For IBM WebSphere MQ version 8.0, apply the fix according to IBM Reference #: 1998648 to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-8986

Produtos afetados

Ibm Websphere Mq

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-8986 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg21998648 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-8986 · Nota de Segurança
• http://securityfocus.com/bid/96412 · Nota