Lucene search
HistoryDec 18, 2023 - 3:15 p.m.
CVE-2023-46177
ibm
mq appliance
directory traversal
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
35.2%
IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536.
Affected configurations
Node
ibmmq_applianceMatch9.3.0.0continuous_delivery
ORibmmq_applianceMatch9.3.0.0lts
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | mq_appliance | 9.3.0.0 | cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:continuous_delivery:*:*:* |
| ibm | mq_appliance | 9.3.0.0 | cpe:2.3:a:ibm:mq_appliance:9.3.0.0:*:*:*:lts:*:*:* |
Related
ibm
ibm
prion
prion
Design/Logic Flaw
2023-12-18 15:15:00
cvelist
cvelist
CVE-2023-46177 IBM MQ Appliance information disclosure
2023-12-18 14:11:51
cve
cve
CVE-2023-46177
2023-12-18 15:15:08
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
35.2%
Related for NVD:CVE-2023-46177