Lucene search
IbmCVELIST:CVE-2022-31772HistoryNov 11, 2022 - 6:56 p.m.
CVE-2022-31772 IBM MQ denial of service
2022-11-1118:56:12
CWE-20
ibm
www.cve.org
5
ibm mq
denial of service
vulnerability
mqtt channels
x-force id
authenticated user
authorized user
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
34.4%
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "MQ",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0"
}
]
}
]Related
cnvd
cnvd
IBM MQ Input Validation Error Vulnerability (CNVD-2023-08771)
2022-11-06 00:00:00
cve
cve
CVE-2022-31772
2022-11-11 19:15:10
prion
prion
Code injection
2022-11-11 19:15:00
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands may be vulnerable to denial of service due to CVE-2022-31772
2022-11-08 11:12:19
Security Bulletin: IBM MQ could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. (CVE-2022-31772)
2023-01-25 15:18:56
Security Bulletin: IBM Sterling Secure Proxy vulnerable to multiple issues
2023-01-31 14:18:52
nessus
nessus
IBM MQ Authenticated DoS (6833806)
2022-11-10 00:00:00
nvd
nvd
CVE-2022-31772
2022-11-11 19:15:10
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
34.4%
Related for CVELIST:CVE-2022-31772