VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jan 1, 2016· Updated May 6, 2026

CVE-2015-4941

CVE-2015-4941

Description

IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR service crash) via unspecified vectors.

Affected products

2
  • IBM/Websphere Mq Light2 versions
    cpe:2.3:a:ibm:websphere_mq_light:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:websphere_mq_light:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_mq_light:1.0.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.