CVE-2018-1652
Estado: ModificadaMedia (5.5)—
IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown vectors. IBM X-Force ID: 144724.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.37%
- Percentil entre todas las CVEs puntuadas: 29
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-20
Referencias
- https://exchange.xforce.ibmcloud.com/vulnerabilities/144724
- https://www.ibm.com/support/docview.wss?uid=ibm10717483
- https://www.ibm.com/support/docview.wss?uid=ibm10744557
- https://exchange.xforce.ibmcloud.com/vulnerabilities/144724
- https://www.ibm.com/support/docview.wss?uid=ibm10717483
- https://www.ibm.com/support/docview.wss?uid=ibm10744557
JSON original (NVD)
Mostrar
{
"id": "CVE-2018-1652",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": true,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.2,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.5
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "DataPower Gateways",
"versions": [
{
"status": "affected",
"version": "7.1.0.0"
},
{
"status": "affected",
"version": "7.2.0.0"
},
{
"status": "affected",
"version": "7.5.0.0"
},
{
"status": "affected",
"version": "7.5.1.0"
},
{
"status": "affected",
"version": "7.6.0.0"
},
{
"status": "affected",
"version": "7.5.2.0"
},
{
"status": "affected",
"version": "7.6.0.2"
},
{
"status": "affected",
"version": "7.5.2.9"
},
{
"status": "affected",
"version": "7.5.1.9"
},
{
"status": "affected",
"version": "7.5.0.10"
},
{
"status": "affected",
"version": "7.2.0.16"
},
{
"status": "affected",
"version": "7.1.0.19"
}
]
},
{
"vendor": "IBM",
"product": "MQ Appliance",
"versions": [
{
"status": "affected",
"version": "9.0.1"
},
{
"status": "affected",
"version": "9.0.5"
},
{
"status": "affected",
"version": "8.0.0.0"
},
{
"status": "affected",
"version": "8.0.0.8"
}
]
}
]
}
],
"published": "2018-12-11T16:29:00.467",
"references": [
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/144724",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10717483",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10744557",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/144724",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10717483",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10744557",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 through 7.2.0.16, 7.5.0.0 through 7.5.0.10, 7.5.1.0 through 7.5.1.9, 7.5.2.0 through 7.5.2.9, and 7.6.0.0 through 7.6.0.2 and IBM MQ Appliance 8.0.0.0 through 8.0.0.8 and 9.0.1 through 9.0.5 could allow a local user to cause a denial of service through unknown vectors. IBM X-Force ID: 144724."
},
{
"lang": "es",
"value": "IBM DataPower Gateway desde la versión 7.1.0.0 hasta la 7.1.0.19, desde la 7.2.0.0 hasta la 7.2.0.16, desde la 7.5.0.0 hasta la 7.5.0.10, desde la 7.5.1.0 hasta la 7.5.1.9, desde la 7.5.2.0 hasta la 7.5.2.9 y desde la 7.6.0.0 hasta la 7.6.0.2 e IBM MQ Appliance desde la versión 8.0.0.0 hasta la 8.0.0.8 y desde la 9.0.1 hasta la 9.0.5 podrían permitir a un usuario local provocar una denegación de servicio (DoS) mediante vectores desconocidos. IBM X-Force ID: 144724."
}
],
"lastModified": "2026-06-17T01:51:32.533",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "799BC488-8D13-49F5-8538-FD691728890E",
"versionEndIncluding": "7.1.0.19",
"versionStartIncluding": "7.1.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D1B2B51-6930-4587-9C42-485D3BE46430",
"versionEndIncluding": "7.2.0.16",
"versionStartIncluding": "7.2.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2887923-DAF8-41F5-8A7F-CCC151B5AF6D",
"versionEndIncluding": "7.5.0.10",
"versionStartIncluding": "7.5.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21D7E9B5-4968-4783-B684-FB8F1236B303",
"versionEndIncluding": "7.5.1.9",
"versionStartIncluding": "7.5.1.0"
},
{
"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7BB6E84-A488-45B4-AD19-960107B6D263",
"versionEndIncluding": "7.5.2.9",
"versionStartIncluding": "7.5.2.0"
},
{
"criteria": "cpe:2.3:a:ibm:datapower_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A330B99-98A7-4427-A7D0-070921E2395B",
"versionEndIncluding": "7.6.0.2",
"versionStartIncluding": "7.6.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:mq_appliance:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F6BC780-8BF2-49D9-A374-51AEEF556EC3",
"versionEndIncluding": "8.0.0.8",
"versionStartIncluding": "8.0.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:mq_appliance:*:*:*:*:continuous_delivery:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FD0DF7E-38EF-4658-B8A3-F195543D577C",
"versionEndIncluding": "9.0.5",
"versionStartIncluding": "9.0.1"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}