PT-2018-12875 · Ibm · Ibm Websphere Mq

Publicado 2018-07-23 · Atualizado 2019-10-09 · CVE-2018-1503

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ versions 7.5 through 9.0

Description The issue allows a remotely authenticated attacker to send invalid or malformed headers, potentially causing messages to no longer be transmitted via the affected channel.

Recommendations For IBM WebSphere MQ versions 7.5 through 9.0, update to a version that includes the fix for this issue to prevent exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-1503

Produtos afetados

Ibm Websphere Mq

Referências · 6

• http://securityfocus.com/bid/104953 · Nota
• http://securitytracker.com/id/1041387 · Nota
• http://ibm.com/support/docview.wss?uid=swg22015617 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1503 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/141339 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1503 · Nota de Segurança