CVE-2018-1684

Published: Nov 9, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of service attack. IBM X-Force ID: 145456.

Affected (4)

Products: Ibm: Websphere Mq

Ibm

1 product

Websphere Mq

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Mq	From 8.0.0.0 to 8.0.0.10
Ibm Websphere Mq	From 9.0.0.0 to 9.0.0.5
Ibm Websphere Mq	From 9.0.1 to 9.0.5
Ibm Websphere Mq	Version 9.1.0.0

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/145456

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10734297

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/145456

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10734297

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.