CVE-2012-2201

{"id": "CVE-2012-2201", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-09-29T03:15:10.877", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76799", "tags": ["Broken Link", "VDB Entry"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker could exploit this vulnerability to bypass the security configuration setup on a SVRCONN channel and flood the queue manager."}, {"lang": "es", "value": "IBM WebSphere MQ versi\u00f3n 7.1, es vulnerable a una denegaci\u00f3n de servicio, causada por un error cuando son manejados los identificadores de usuario. Un atacante remoto podr\u00eda aprovechar esta vulnerabilidad para omitir la configuraci\u00f3n de seguridad de un canal SVRCONN e inundar el administrador de colas"}], "lastModified": "2022-10-28T22:38:55.750", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_mq:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "417A12D5-4E6E-487E-9515-2410B3697639"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}