CVE-2017-1318

EUVD-2017-10334 · Published Jul 18, 2017

IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730.

Technologies

Ibm Mq Appliance

Weaknesses

CWE-78

CVSS scores

v3.08.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.09.0AV:N/AC:L/Au:S/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://www.ibm.com/support/docview.wss?uid=swg22003815
http://www.securityfocus.com/bid/99594
https://exchange.xforce.ibmcloud.com/vulnerabilities/125730

Potentially impacted assets

See if this affects your attack surface