Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-1652)

Summary

IBM MQ Appliance has addressed a denial of service vulnerability.

Vulnerability Details

CVEID: CVE-2018-1652 DESCRIPTION: IBM WebSphere DataPower Appliances and IBM MQ Appliance could allow a local user to cause a denial of service through unknown vectors.
CVSS Base Score: 6.2
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/144724&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

IBM MQ Appliance 8.0

Maintenance levels between 8.0.0.0 and 8.0.0.8

IBM MQ Appliance 9.0.x Continuous Delivery (CD) Release

Maintenance levels between 9.0.1 and 9.0.5

Remediation/Fixes

IBM MQ Appliance 8.0

Apply fixpack 8.0.0.9 or later

IBM MQ Appliance 9.0.x Continuous Delivery (CD) Release

Apply 9.1 Long Term Support (LTS) release, or 9.1.1 Continuous Delivery Release, or later.

Workarounds and Mitigations

None