CVE-2017-1318 — OS Command Injection in IBM MQ Appliance

CWE-78 — OS Command Injection3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.7%
top 27.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM MQ Appliance
Timeline
PublishedJul 18
Latest updateMay 17

Description

IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/mq_appliance7 versions+6
▶NVDibm/mq_appliance9 versions+8

🔴Vulnerability Details

2
GHSA
GHSA-prwg-rgj2-8qfp: IBM MQ Appliance 8↗2022-05-17
▶
CVEList
CVE-2017-1318: IBM MQ Appliance 8↗2017-07-18
▶
CVE-2017-1318 — OS Command Injection in IBM | cvebase