Lucene search

IbmCVELIST:CVE-2022-40237

HistoryFeb 27, 2023 - 2:18 p.m.

CVE-2022-40237 IBM MQ for HPE NonStop denial of service

2023-02-2714:18:08

CWE-20

ibm

www.cve.org

ibm

hpe nonstop

denial of service

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "MQ for HPE NonStop",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.1.0"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/235727

www.ibm.com/support/pages/node/6958136

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

Related for CVELIST:CVE-2022-40237