CVE-2016-8986: Medium severity IBM WebSphere MQ vulnerability
Published Feb 22, 2017
·Updated
IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests. IBM Reference #: 1998648.
Affected Software
7 affected components
IBM WebSphere MQ=8.0
IBM WebSphere MQ=8.0.0.0
IBM WebSphere MQ=8.0.0.1
IBM WebSphere MQ=8.0.0.2
IBM WebSphere MQ=8.0.0.3
IBM WebSphere MQ=8.0.0.4
IBM WebSphere MQ=8.0.0.5
Remediation
Patch Available
Event History
Feb 22, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Data Sourced
via NVD·07:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8986?
The severity of CVE-2016-8986 is considered to be high, as it allows an authenticated user to disrupt MQ channels.
2
How do I fix CVE-2016-8986?
To fix CVE-2016-8986, upgrade to a patched version of IBM WebSphere MQ that addresses this vulnerability.
3
Who is affected by CVE-2016-8986?
CVE-2016-8986 affects users of IBM WebSphere MQ version 8.0, including all its sub-releases.
4
What types of attacks are possible with CVE-2016-8986?
With CVE-2016-8986, an attacker can send specially crafted HTTP requests to bring down MQ channels.
5
Is authentication a factor in CVE-2016-8986?
Yes, CVE-2016-8986 requires the attacker to be an authenticated user with access to the queue manager.