Vulnerability in Ibm Datapower Gateways
CVE-2018-1677
IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a…
EPSS: 0.000 (15.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.0/A:H/AC:H/AV:L/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O.
Affected products
- Ibm Datapower Gateways — versions 7.5.2, 7.2, 7.5
References
- ibm-websphere-cve20181677-dos(145171) (vdb-entry, x_refsource_XF)
- 106284 (vdb-entry, x_refsource_BID)
- www.ibm.com/support/docview.wss (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2018-1677?
- CVE-2018-1677 is a medium-severity vulnerability in Ibm Datapower Gateways. CVSS score: 5.1/10. Published 2018-12-20.
- How severe is CVE-2018-1677?
- Medium severity. CVSS v3 base score is 5.1 out of 10.