CVE-2018-1551low

CVE-2018-1551: low-severity vulnerability in IBM WebSphere MQ

Published · Updated

Follow this CVE+ Monitor WebSphere MQ

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.1epss 1.1%
IBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.
CVSS:3.0/A:N/AC:H/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O
Affected products
IBM · WebSphere MQ
Related CVEs — IBM WebSphere MQ

In the same product, most dangerous first.

CVE-2018-1388—CVE-2018-1388EPSS 2.2%CVE-2018-1503MEDIUMCVE-2018-1503EPSS 2.0%CVE-2017-1118—CVE-2017-1118EPSS 1.9%CVE-2020-4310MEDIUMCVE-2020-4310EPSS 1.6%CVE-2018-1374MEDIUMCVE-2018-1374EPSS 1.3%CVE-2012-4863—CVE-2012-4863EPSS 1.2%