CVE-2016-0379
low
CVSS v3
3.1
CVSS v2
3.5
VIR risk
3.1
Description
IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service (channel outage) by leveraging queue-manager rights.
Predictions
Exploit likelihood
42%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21984565
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | websphere_mq | 7.5 | |
| ibm | websphere_mq | 7.5.0.1 | |
| ibm | websphere_mq | 7.5.0.2 | |
| ibm | websphere_mq | 7.5.0.3 | |
| ibm | websphere_mq | 7.5.0.4 | |
| ibm | websphere_mq | 7.5.0.5 | |
| ibm | websphere_mq | 7.5.0.6 | |
| ibm | websphere_mq | 8.0 | |
| ibm | websphere_mq | 8.0.0.1 | |
| ibm | websphere_mq | 8.0.0.2 | |
| ibm | websphere_mq | 8.0.0.3 | |
| ibm | websphere_mq | 8.0.0.4 | |
References
CWEs
CWE-19
Verify integrity in audit chain (admin only). AS-IS.