PT-2016-3632 · Ibm · Ibm Websphere Mq Light

Sakari Kaikkonen · Published 2016-01-18 · Updated 2016-12-07 · CVE-2015-4942

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ Light versions 1.0.0 through 1.0.1

Description The issue allows remote attackers to cause a denial of service, resulting in the crash of the MQXR service. This can be achieved by performing a series of connect and disconnect actions.

Recommendations For IBM WebSphere MQ Light versions 1.0.0 through 1.0.1, update to version 1.0.2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-4942

Affected Products

Ibm Websphere Mq Light

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-4942 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21974169 · Vendor Advisory
• http://securitytracker.com/id/1034698 · Note