According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is version 7.0.1.x without patch APAR IT14385, 7.1.0.x prior to 7.1.0.9, 7.5.0.x prior to 7.5.0.8, 8.0.0.x prior to 8.0.0.6, or 9.0.0.x prior to 9.0.0.1. したがって、以下の複数の脆弱性による影響を受けます。

  - A flaw exists in the Java Message Service (JMS) in the JMSObjectMessage class due to improper sanitization of input when deserializing Java objects. An authenticated, remote attacker can exploit this to execute arbitrary code. (CVE-2016-0360)

  - A flaw exists due to improper data conversion handling that allows an authenticated, remote attacker to crash the MQ channel. (CVE-2016-3013)

  - A flaw exists that under nonstandard configurations causes password data to be sent in cleartext over the network. A man-in-the-middle attacker can exploit this to disclose passwords. (CVE-2016-3052)

  - An unspecified flaw exists that allows an authenticated, remote attacker, who has access to the queue manager and queue, to cause a denial of service to other channels running under the same process. (CVE-2016-8915)

  - A flaw exists that allows an unauthenticated, remote attacker to have an unspecified impact. これ以上の詳細情報はありません。（CVE-2016-8971）

  - An unspecified flaw exists that allows an authenticated, remote attacker, who has access to the queue manager, to disrupt MQ channels using specially crafted HTTP requests, resulting in a denial of service condition.
    (CVE-2016-8986)

  - An unspecified flaw exists that allows an authenticated, remote attacker, who has authority to create cluster objects, to cause a denial of service condition in MQ clustering. (CVE-2016-9009)

根據其自我報告的版本，遠端 Windows 主機上安裝的 IBM WebSphere MQ 伺服器版本為不含 APAR IT14385 修補程式的 7.0.1.x 版、 7.1.0.9 之前的 7.1.0.x 版、7.5.0.8 之前的 7.5.0.x 版、 8.0.0.6 之前的 8.0.0.x 版，或是 9.0.0.1 之前的 9.0.0.x 版。因此，會受到多個弱點影響：- JMSObjectMessage 類別中的 Java 訊息服務 (JMS) 存在一個缺陷，這是因為在還原序列化 Java 物件時不當清理輸入所致。經驗證的遠端攻擊者可利用此弱點執行任意程式碼。(CVE-2016-0360) - 存在一個缺陷，這是因為資料轉換處理不當所致，讓經驗證的遠端攻擊者得以損毀 MQ 通道。(CVE-2016-3013) - 存在一個缺陷，在非標準組態下會造成透過網路以純文字傳送密碼。攔截式攻擊者可惡意利用此缺陷來洩漏密碼。(CVE-2016-3052) - 存在一個不明缺陷，讓可以存取佇列管理員和佇列且經驗證的遠端攻擊者，得以對在相同處理程序下執行的其他通道引發拒絕服務情形。(CVE-2016-8915) - 存在一個缺陷，讓未經驗證的遠端攻擊者得以造成不明影響。目前尚無其他詳細資料可以提供。(CVE-2016-8971) - 存在一個不明缺陷，讓可以存取佇列管理員且經驗證的遠端攻擊者，得以使用特製的 HTTP 要求來中斷 MQ 通道，進而引發拒絕服務情形。(CVE-2016-8986) - 存在一個不明缺陷，讓有權建立叢集物件且經驗證的遠端攻擊者，得以在 MQ 叢集中引發拒絕服務情形。(CVE-2016-9009)

根据其自我报告的版本号，远程 Windows 主机上的 IBM WebSphere MQ 服务器版本为不含 APAR IT14385 修补程序的 7.0.1.x、低于 7.1.0.9 的 7.1.0.x、低于 7.5.0.8 的 7.5.0.x、低于 8.0.0.6 的 8.0.0.x，或低于 9.0.0.1 的 9.0.0.x。因而会受到多个漏洞的影响：- 由于在序列化 Java 对象时未正确清理输入，JMSObjectMessage 类的 Java 消息服务 (JMS) 中存在缺陷。经身份验证的远程攻击者可利用此问题执行任意代码。(CVE-2016-0360) - 由于未正确处理数据转换，而存在缺陷，允许经身份验证的远程攻击者使得 MQ 通道崩溃。(CVE-2016-3013) - 存在缺陷，在非标准配置下，会导致以明文通过网络发送密码数据。中间人攻击者可借此泄露密码。(CVE-2016-3052) - 存在不明缺陷，允许可访问队列管理器和队列且经身份验证的远程攻击者，对同一进程中的其他通道造成拒绝服务。(CVE-2016-8915) - 存在不明缺陷，允许未经身份验证的远程攻击者造成不明影像。无其他详细内容。(CVE-2016-8971) - 存在不明缺陷，允许可访问队列管理器和队列且经身份验证的远程攻击者，使用特制的 HTTP 请求，中断 MQ 通道，进而导致拒绝服务情况。(CVE-2016-8986) - 存在不明缺陷，允许有权创建群集对象且经身份验证的远程攻击者，在 MQ 群集中造成拒绝服务情况。(CVE-2016-9009)

According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is version 7.0.1.x without patch APAR IT14385, 7.1.0.x prior to 7.1.0.9, 7.5.0.x prior to 7.5.0.8, 8.0.0.x prior to 8.0.0.6, or 9.0.0.x prior to 9.0.0.1. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the Java Message Service (JMS) in the     JMSObjectMessage class due to improper sanitization of     input when deserializing Java objects. An authenticated,     remote attacker can exploit this to execute arbitrary     code. (CVE-2016-0360)

  - A flaw exists due to improper data conversion handling     that allows an authenticated, remote attacker to crash     the MQ channel. (CVE-2016-3013)

  - A flaw exists that under nonstandard configurations     causes password data to be sent in cleartext over the     network. A man-in-the-middle attacker can exploit this     to disclose passwords. (CVE-2016-3052)

  - An unspecified flaw exists that allows an authenticated,     remote attacker, who has access to the queue manager and     queue, to cause a denial of service to other channels     running under the same process. (CVE-2016-8915)

  - A flaw exists that allows an unauthenticated, remote     attacker to have an unspecified impact. No other details     are available. (CVE-2016-8971)

  - An unspecified flaw exists that allows an authenticated,     remote attacker, who has access to the queue manager,     to disrupt MQ channels using specially crafted HTTP     requests, resulting in a denial of service condition.
    (CVE-2016-8986)

  - An unspecified flaw exists that allows an authenticated,     remote attacker, who has authority to create cluster     objects, to cause a denial of service condition in     MQ clustering. (CVE-2016-9009)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
96663	IBM WebSphere MQ 7.0.1.x/7.1.0.x < 7.1.0.9/7.5.0.x < 7.5.0.8/8.0.0.x < 8.0.0.6/9.0.0.x < 9.0.0.1の複数の脆弱性	Nessus	Windows	2017/3/3	2019/11/13	critical
96663	IBM WebSphere MQ 7.0.1.x / 7.1.0.x < 7.1.0.9 / 7.5.0.x < 7.5.0.8 / 8.0.0.x < 8.0.0.6 / 9.0.0.x < 9.0.0.1 多個弱點	Nessus	Windows	2017/3/3	2019/11/13	critical
96663	IBM WebSphere MQ 7.0.1.x / 7.1.0.x < 7.1.0.9 / 7.5.0.x < 7.5.0.8 / 8.0.0.x < 8.0.0.6 / 9.0.0.x < 9.0.0.1 多个漏洞	Nessus	Windows	2017/3/3	2019/11/13	critical
96663	IBM WebSphere MQ 7.0.1.x / 7.1.0.x < 7.1.0.9 / 7.5.0.x < 7.5.0.8 / 8.0.0.x < 8.0.0.6 / 9.0.0.x < 9.0.0.1 Multiple Vulnerabilities	Nessus	Windows	2017/3/3	2019/11/13	critical

検出

プラグインの検索

critical

critical

critical

critical