Unscored severity · published Apr 1, 2015
CVE-2015-1892
The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Access Manager For Web 7.0 Firmware · Ibm
through 7.0.0.11 · source: NVD
SA
Security Access Manager For Web 8.0 Firmware · Ibm
8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.4; 8.0.0.5; 8.0.1.0 · source: NVD
Affected product
SA
Security Access Manager For Web 7.0 Firmware
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1892
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1892
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70911
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70913
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21699497
Third Party Advisory
http://www.kb.cert.org/vuls/id/550620
Third Party Advisory
http://www.securityfocus.com/bid/73683
More from Security Access Manager For Web 7.0 Firmware
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
8.0
CVE-2015-5018
IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute…
7.5
CVE-2016-5919
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
7.5
CVE-2016-3017
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations