CVE-2017-1235
medium
CVSS v3
6.5
CVSS v2
4.0
VIR risk
6.5
Description
IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potentially cause denial of service. IBM X-Force ID: 123914.
Predictions
Exploit likelihood
75%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www.ibm.com/support/docview.wss?uid=swg22005415
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | websphere_mq | 8.0.0.0 | |
| ibm | websphere_mq | 8.0.0.1 | |
| ibm | websphere_mq | 8.0.0.2 | |
| ibm | websphere_mq | 8.0.0.3 | |
| ibm | websphere_mq | 8.0.0.4 | |
| ibm | websphere_mq | 8.0.0.5 | |
| ibm | websphere_mq | 8.0.0.6 | |
References
- http://www.ibm.com/support/docview.wss?uid=swg22005415
- http://www.securityfocus.com/bid/100955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/123914
- http://www.ibm.com/support/docview.wss?uid=swg22005415
- http://www.securityfocus.com/bid/100955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/123914
Verify integrity in audit chain (admin only). AS-IS.