PT-2018-13733 · Ibm · Ibm Datapower Gateway+1

Published 2018-12-20 · Updated 2020-08-24 · CVE-2018-1677

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateways versions 7.1 through 7.7 IBM MQ Appliance (affected versions not specified)

Description The issue is caused by the improper handling of a full file system, which could allow a local attacker to exploit it and cause a denial of service.

Recommendations For IBM DataPower Gateways versions 7.1 through 7.7, update to a version that properly handles full file system conditions to prevent denial of service attacks. For IBM MQ Appliance, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2018-1677

Affected Products

Ibm Datapower Gateway

Ibm Mq Appliance

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-1677 · Security Note
• https://ibm.com/support/docview.wss?uid=ibm10744555 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/145171 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1677 · Vendor Advisory
• http://securityfocus.com/bid/106284 · Note