Sign-up

ID

VAR-201707-0274


CVE

CVE-2017-1236


TITLE

IBM WebSphere MQ Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2017-005641

DESCRIPTION

IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM X-Force ID: 124354. IBM WebSphere MQ There is a service disruption (DoS) There are vulnerabilities that are put into a state. IBM MQ is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to crash the service, denying service to legitimate users

Trust: 1.89

sources: NVD: CVE-2017-1236 // JVNDB: JVNDB-2017-005641 // BID: 99505

AFFECTED PRODUCTS

vendor:ibmmodel:websphere mqscope:eqversion:9.0.2

Trust: 2.4

vendor:ibmmodel:mq appliancescope:eqversion:9.0

Trust: 0.3

vendor:ibmmodel:mq cdscope:eqversion:9.0.2

Trust: 0.3

vendor:ibmmodel:mq cdscope:neversion:9.0.3

Trust: 0.3

sources: BID: 99505 // JVNDB: JVNDB-2017-005641 // CNNVD: CNNVD-201707-285 // NVD: CVE-2017-1236

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-1236
value: MEDIUM

Trust: 1.0

NVD: CVE-2017-1236
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201707-285
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2017-1236
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2017-1236
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: JVNDB: JVNDB-2017-005641 // CNNVD: CNNVD-201707-285 // NVD: CVE-2017-1236

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2017-005641 // NVD: CVE-2017-1236

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201707-285

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201707-285

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2017-005641

PATCH
title:2003510url:http://www-01.ibm.com/support/docview.wss?uid=swg22003510
Trust: 0.8
title:IBM WebSphere MQ  and IBM MQ Appliance Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=71548
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2017-005641 // 
            
            
            
            CNNVD: CNNVD-201707-285

EXTERNAL IDS
db:NVDid:CVE-2017-1236
Trust: 2.7
db:BIDid:99505
Trust: 1.3
db:JVNDBid:JVNDB-2017-005641
Trust: 0.8
db:CNNVDid:CNNVD-201707-285
Trust: 0.6
sources:
            
            
            BID: 99505 // 
            
            
            
            JVNDB: JVNDB-2017-005641 // 
            
            
            
            CNNVD: CNNVD-201707-285 // 
            
            
            
            NVD: CVE-2017-1236

REFERENCES
url:http://www.ibm.com/support/docview.wss?uid=swg22003510
Trust: 1.6
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/124354
Trust: 1.6
url:http://www.securityfocus.com/bid/99505
Trust: 1.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-1236
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2017-1236
Trust: 0.8
url:http://www.ibm.com/
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg22003510
Trust: 0.3
sources:
            
            
            BID: 99505 // 
            
            
            
            JVNDB: JVNDB-2017-005641 // 
            
            
            
            CNNVD: CNNVD-201707-285 // 
            
            
            
            NVD: CVE-2017-1236

CREDITS
The vendor reported the issue.
Trust: 0.3
sources:
            
            
            BID: 99505

SOURCES
db:BIDid:99505
db:JVNDBid:JVNDB-2017-005641
db:CNNVDid:CNNVD-201707-285
db:NVDid:CVE-2017-1236

LAST UPDATE DATE
2024-11-23T22:56:11.550000+00:00

SOURCES UPDATE DATE
db:BIDid:99505date:2017-07-05T00:00:00
db:JVNDBid:JVNDB-2017-005641date:2017-08-03T00:00:00
db:CNNVDid:CNNVD-201707-285date:2017-12-08T00:00:00
db:NVDid:CVE-2017-1236date:2024-11-21T03:21:33.593

SOURCES RELEASE DATE
db:BIDid:99505date:2017-07-05T00:00:00
db:JVNDBid:JVNDB-2017-005641date:2017-08-03T00:00:00
db:CNNVDid:CNNVD-201707-285date:2017-07-10T00:00:00
db:NVDid:CVE-2017-1236date:2017-07-06T14:29:00.247