CVE-2015-7420
low-risk
Published 2016-01-01
Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421.
Do I need to act?
-
0.29% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.7/10
Low
NETWORK
/ HIGH complexity
Affected Products (1)
Mq Appliance M2000
Affected Vendors
References (8)
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21971500
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21971500
19
/ 100
low-risk
Severity
13/34 · Low
Exploitability
1/34 · Minimal
Exposure
5/34 · Minimal