Low severity · published Jan 1, 2016
CVE-2015-7421
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability…
3.7
CVSS
1.8%
EPSS
No
On KEV
Description
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
MQ Appliance M2000 · Ibm
through 8.0.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7421
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7421
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=isg3T1023277
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21971500
www.securityfocus.com
http://www.securityfocus.com/bid/82303
www.securitytracker.com
http://www.securitytracker.com/id/1034846
More from MQ Appliance M2000
5.6
CVE-2015-1985
The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an intended password requirement and read private keys by leveraging the existence of a…
3.7
CVE-2015-7420
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability…