CVE-2012-3295 — IBM Websphere MQ vulnerability

CWE-2643 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 59.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere MQ
Timeline
PublishedAug 29
Latest updateMay 17

Description

IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration setup step and obtain queue-manager access via unspecified vectors.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-rp6p-jv9g-hhv5: IBM WebSphere MQ 7↗2022-05-17
▶
CVEList
CVE-2012-3295: IBM WebSphere MQ 7↗2012-08-29
▶
CVE-2012-3295 — IBM Websphere MQ vulnerability | cvebase