4.3

CVE-2017-1283

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144.

Data is provided by the National Vulnerability Database (NVD)
IbmWebsphere Mq Version8.0
IbmWebsphere Mq Version8.0.0.1
IbmWebsphere Mq Version8.0.0.2
IbmWebsphere Mq Version8.0.0.3
IbmWebsphere Mq Version8.0.0.4
IbmWebsphere Mq Version8.0.0.5
IbmWebsphere Mq Version8.0.0.6
IbmWebsphere Mq Version8.0.0.7
IbmWebsphere Mq Version9.0
IbmWebsphere Mq Version9.0.0.1
IbmWebsphere Mq Version9.0.1
IbmWebsphere Mq Version9.0.2
IbmWebsphere Mq Version9.0.3
IbmWebsphere Mq Version9.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.28% 0.481
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.