CVE-2018-1652

EUVD-2018-12231
IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown vectors. IBM X-Force ID: 144724.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ibmCNA
6.2 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/A:H/AC:L/AV:L/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
ibmdatapower_gateway
7.1.0.0 ≤
𝑥
≤ 7.1.0.19
ibmdatapower_gateway
7.2.0.0 ≤
𝑥
≤ 7.2.0.16
ibmdatapower_gateway
7.5.0.0 ≤
𝑥
≤ 7.5.0.10
ibmdatapower_gateway
7.5.1.0 ≤
𝑥
≤ 7.5.1.9
ibmdatapower_gateway
7.5.2.0 ≤
𝑥
≤ 7.5.2.9
ibmdatapower_gateway
7.6.0.0 ≤
𝑥
≤ 7.6.0.2
ibmmq_appliance
8.0.0.0 ≤
𝑥
≤ 8.0.0.8
ibmmq_appliance
9.0.1 ≤
𝑥
≤ 9.0.5
𝑥
= Vulnerable software versions