PT-2018-13733 · Ibm · Ibm Datapower Gateway+1

Publicado 2018-12-20 · Atualizado 2020-08-24 · CVE-2018-1677

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateways versions 7.1 through 7.7 IBM MQ Appliance (affected versions not specified)

Description The issue is caused by the improper handling of a full file system, which could allow a local attacker to exploit it and cause a denial of service.

Recommendations For IBM DataPower Gateways versions 7.1 through 7.7, update to a version that properly handles full file system conditions to prevent denial of service attacks. For IBM MQ Appliance, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2018-1677

Produtos afetados

Ibm Datapower Gateway

Ibm Mq Appliance

Referências · 5

• http://securityfocus.com/bid/106284 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1677 · Nota de Segurança
• https://ibm.com/support/docview.wss?uid=ibm10744555 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/145171 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1677 · Aviso do Fabricante