Lucene search

K
cve[email protected]CVE-2012-2201
HistorySep 29, 2022 - 3:15 a.m.

CVE-2012-2201

2022-09-2903:15:10
web.nvd.nist.gov
31
5
cve-2012-2201
ibm
websphere
mq
denial of service
vulnerability
nvd
svrconn
security configuration
remote attacker

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.3%

IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker could exploit this vulnerability to bypass the security configuration setup on a SVRCONN channel and flood the queue manager.

Affected configurations

NVD
Node
ibmwebsphere_mqMatch7.1
CPENameOperatorVersion
ibm:websphere_mqibm websphere mqeq7.1

Social References

More

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.3%

Related for CVE-2012-2201