Denial of Service Vulnerability in IBM WebSphere MQ | IBM
CVE-2012-4863

6.5MEDIUM

Key Information:

Vendor
IBM
Status
Websphere MQ
Vendor
CVE Published:
23 January 2020

Summary

IBM WebSphere MQ versions 7.1 and 7.5 are impacted by a denial of service vulnerability that could allow unauthorized users to disrupt the functioning of queue managers. This can potentially hinder communication processes within applications reliant on message queuing. Taking immediate action to patch this vulnerability is crucial for maintaining operational integrity and security.

Affected Version(s)

WebSphere MQ 7.1 without Fix Pack 7.1.0.2

WebSphere MQ 7.5 without Fix Pack 7.5.0.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/79920
x_refsource_MISC
https://www.tenable.com/plugins/nessus/63099
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.