CVE-2018-1677 MEDIUM

CVE-2018-1677

Vendor Ibm
Product DataPower Gateways
Published December 20, 2018
Last update September 16, 2024

CVSS base score

5.1/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/A:H/AC:H/AV:L/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O

What the vulnerability does

01Description

IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 145171.

Key dates

02Disclosure timeline

December 20, 2018 CVE published
September 16, 2024 Record updated