IBM Security Bulletin: IBM MQ Console could allow an attacker to execute a denial of service attack. (CVE-2018-1883)

Dec 6, 2018 9:01 am EST

Categorized: Medium Severity

Share this post:

A problem within the IBM MQ Console REST API could allow attackers to execute a denial of service attack preventing users from logging into the MQ Console REST API.

CVE(s): CVE-2018-1883

Affected product(s) and affected version(s):

IBM MQ V9 CD

IBM MQ V9 CD versions 9.0.2 – 9.0.5

IBM MQ V9.1 LTS

IBM MQ V9.1 LTS versions 9.1.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10738197
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/151969

from IBM Product Security Incident Response Team https://ift.tt/2ro6JrJ