Lucene search

IbmCVELIST:CVE-2023-28513

HistoryJul 19, 2023 - 1:49 a.m.

CVE-2023-28513 IBM MQ denial of service

2023-07-1901:49:14

CWE-20

ibm

www.cve.org

ibm

denial of service

vulnerability

x-force id

configuration

error processing.

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

57.6%

JSON

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "MQ",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, 9.3 CD"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MQ Appliance",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.2 LTS, 9.3 LTS, 9.2 CD, 9.2 LTS"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/250397

www.ibm.com/support/pages/node/7007421

www.ibm.com/support/pages/node/7007731

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

57.6%

JSON

Related for CVELIST:CVE-2023-28513