CVEvulnerability

CVE-2018-1652

5.5 MEDIUM Published 2018-12-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.2 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown vectors. IBM X-Force ID: 144724.

Affected configurations

• ibm datapower gateway (>= 7.1.0.0 <= 7.1.0.19) • ibm datapower gateway (>= 7.2.0.0 <= 7.2.0.16) • ibm datapower gateway (>= 7.5.0.0 <= 7.5.0.10) • ibm datapower gateway (>= 7.5.1.0 <= 7.5.1.9) • ibm datapower gateway (>= 7.5.2.0 <= 7.5.2.9) • ibm datapower gateway (>= 7.6.0.0 <= 7.6.0.2) • ibm mq appliance (>= 8.0.0.0 <= 8.0.0.8) • ibm mq appliance (>= 9.0.1 <= 9.0.5)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References