CVE-2014-0923

2014-04-1523:13:17

CWE-20

[email protected]

web.nvd.nist.gov

ibm

messagesight

cve-2014-0923

denial of service

remote attackers

mq telemetry transport

mqtt

authentication

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

JSON

IBM MessageSight 1.x before 1.1.0.0-IBM-IMA-IT01015 allows remote attackers to cause a denial of service (daemon restart) via crafted MQ Telemetry Transport (MQTT) authentication data.

Affected configurations

NVD

Node

ibmmessagesight_jms_clientMatch1.0.0.0

ibmmessagesight_jms_clientMatch1.0.0.1

ibmmessagesight_jms_clientMatch1.1.0.0

AND

ibmmessagesightMatch-

CPENameOperatorVersion
ibm:messagesight_jms_clientibm messagesight jms clienteq1.0.0.0
ibm:messagesight_jms_clientibm messagesight jms clienteq1.0.0.1
ibm:messagesight_jms_clientibm messagesight jms clienteq1.1.0.0
ibm:messagesightibm messagesighteq-

CPE	Name	Operator	Version
ibm:messagesight_jms_client	ibm messagesight jms client	eq	1.0.0.0
ibm:messagesight_jms_client	ibm messagesight jms client	eq	1.0.0.1
ibm:messagesight_jms_client	ibm messagesight jms client	eq	1.1.0.0
ibm:messagesight	ibm messagesight	eq	-