Vulnerability in IBM Websphere Mq

CVE-2014-4771

IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of service (queue-slot exhaustion) by leveraging PCF query privileges for a crafted query.

EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_mq — versions 7.0.1.0, 7.0.1.1, 7.0.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)