CVE-2018-1503 MEDIUM

CVE-2018-1503

Vendor Ibm
Product WebSphere MQ
Published July 23, 2018
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O

What the vulnerability does

01Description

IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause messages to no longer be transmitted via the affected channel. IBM X-Force ID: 141339.

Key dates

02Disclosure timeline

July 23, 2018 CVE published
September 16, 2024 Record updated