PT-2020-7199 · Ibm · Ibm Websphere Mq

Published 2020-08-27 · Updated 2022-10-28 · CVE-2012-2201

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.1

Description The issue is related to a denial of service caused by an error when handling user ids. A remote attacker could exploit this to bypass the security configuration setup on a SVRCONN channel and flood the queue manager.

Recommendations For IBM WebSphere MQ version 7.1, consider restricting access to the queue manager to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-2201

Affected Products

Ibm Websphere Mq

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-2201 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76799 · Note