6.2
Medium
CVE-2018-1652 IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through…
Description
IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown vectors. IBM X-Force ID: 144724.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DataPower Gateways 7.6 | 7.6.0.0 → 7.6.0.2 | No fix stated |
| DataPower Gateways 7.5 | 7.5.0.0 → 7.5.2.9 | No fix stated |
| DataPower Gateways 7.2 | 7.2.0.0 → 7.2.0.16 | No fix stated |
| DataPower Gateways 7.1 | 7.1.0.0 → 7.1.0.19 | No fix stated |
| MQ Appliance 9.0 | 9.0.1 → 9.0.5 | No fix stated |
| MQ Appliance 8.0 | 8.0.0.0 → 8.0.0.8 | No fix stated |
Other CVEs of DataPower Gateways
The 10 CVEs of DataPower Gateways →
CVE-2018-1661
IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an…
6.5
Medium
CVE-2018-1677
IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of…
5.1
Medium
CVE-2018-1667
IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through…
5.4
Medium
CVE-2018-1663
IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, 7.6, and 2018.4 could allow a remote attacker to obtain sensitive information,…
5.9
Medium