description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078.
problem types: Denial of Service
affected:
{
product: Security Verify Information Queue
vendor: IBM
versions:
status: affected, version: 1.0.6
status: affected, version: 1.0.7
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 2.6
baseSeverity: LOW
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: NONE
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 2.3
temporalSeverity: LOW
userInteraction: REQUIRED
vectorString: CVSS:3.0/A:L/UI:R/C:N/PR:N/S:U/I:N/AV:A/AC:H/E:U/RC:C/RL:O
version: 3.0
]