CVE-2016-9009 - OpenCVE

IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering. IBM Reference #: 1998647.

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:S/C:N/I:N/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Ibm	Websphere Mq

Configuration 1 [-]

OR	cpe:2.3:a:ibm:websphere_mq:8.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.0:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.1:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.2:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.3:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.4:::::::*
	cpe:2.3:a:ibm:websphere_mq:8.0.0.5:::::::*

References

Link	Resource
http://www.ibm.com/support/docview.wss?uid=swg21998647	Patch Vendor Advisory
http://www.securityfocus.com/bid/96441

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: ibm

Published: 2017-02-24T18:00:00

Updated: 2017-03-01T10:57:01

Reserved: 2016-10-25T00:00:00

Link: CVE-2016-9009

JSON object: View

NVD Information

Status : Modified

Published: 2017-02-24T18:59:00.193

Modified: 2017-03-02T02:59:01.647

Link: CVE-2016-9009

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "421E10D4-4B01-4D52-9FFB-208C4745063E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "153F42BE-64AE-4D38-94C1-E59EF10632A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "C5502347-56F2-400F-944B-A532A3A8DE0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "9E6FF889-5D7D-47C0-A2B2-F2BDB39BEFDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "D800EA34-4826-4689-A3C0-03724290567B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "DCBDF404-693B-4500-80FA-90AE022BD5C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:websphere_mq:8.0.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "5FFC3793-4880-4103-B7F6-06F96A17357B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering. IBM Reference #: 1998647."}, {"lang": "es", "value": "IBM WebSphere MQ 8.0 podr\u00eda permitir a un usuario autenticado con autoridad crear un objeto de cl\u00faster para provocar una denegaci\u00f3n de servicio a la agrupaci\u00f3n de MQ. Referencia de IBM: 1998647."}], "id": "CVE-2016-9009", "lastModified": "2017-03-02T02:59:01.647", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-02-24T18:59:00.193", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21998647"}, {"source": "psirt@us.ibm.com", "url": "http://www.securityfocus.com/bid/96441"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}