5.3

CVE-2018-1419

IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ PAM code which could result in a denial of service. IBM X-Force ID: 138949.

Data is provided by the National Vulnerability Database (NVD)
IbmWebsphere Mq Version8.0
IbmWebsphere Mq Version8.0.0.1
IbmWebsphere Mq Version8.0.0.2
IbmWebsphere Mq Version8.0.0.3
IbmWebsphere Mq Version8.0.0.4
IbmWebsphere Mq Version8.0.0.5
IbmWebsphere Mq Version8.0.0.6
IbmWebsphere Mq Version8.0.0.7
IbmWebsphere Mq Version8.0.0.8
IbmWebsphere Mq Version9.0
IbmWebsphere Mq Version9.0.0.1
IbmWebsphere Mq Version9.0.0.2
IbmWebsphere Mq Version9.0.1
IbmWebsphere Mq Version9.0.2
IbmWebsphere Mq Version9.0.3
IbmWebsphere Mq Version9.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.93% 0.752
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 1.6 3.6
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:N/A:P
psirt@us.ibm.com 3.7 2.2 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L