First published: Fri Dec 07 2018(Updated: )
A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service attack preventing users from logging into the MQ Console REST API. IBM X-Force ID: 151969.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM MQ | >=9.0.2<=9.0.5 | |
IBM MQ | =9.1.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1883 has a medium severity rating due to its potential to cause denial of service in the IBM MQ Console REST API.
To fix CVE-2018-1883, it is recommended to upgrade IBM MQ to version 9.1.0.1 or later.
CVE-2018-1883 affects IBM MQ versions 9.0.2 through 9.0.5 and version 9.1.0.0.
The impact of CVE-2018-1883 is that it can prevent users from logging into the IBM MQ Console REST API, effectively causing a denial of service.
There are no documented workarounds for CVE-2018-1883, and applying the security update is recommended.