CVE-2015-1892

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-04-01 · updated 2026-06-17
Weakness: CWE-200

Description

The Multicast DNS (mDNS) responder in IBM Security Access Manager for Web 7.x before 7.0.0 FP12 and 8.x before 8.0.1 FP1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets.

Affected products

IBM Security Access Manager For Web 7.0 Firmware: through 7.0.0.11
IBM Security Access Manager For Web 8.0 Firmware: 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5, 8.0.1.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV70911
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70913
http://www-01.ibm.com/support/docview.wss?uid=swg21699497
http://www.kb.cert.org/vuls/id/550620
http://www.securityfocus.com/bid/73683
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70911
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70913
http://www-01.ibm.com/support/docview.wss?uid=swg21699497
http://www.kb.cert.org/vuls/id/550620
http://www.securityfocus.com/bid/73683

Get alerted when CVE-2015-1892 or the next vulnerability affects your stack