WID-SEC-W-2023-1115

DeutschShown in its original language — a full translation is planned for a future version.

IBM MQ: Mehrere Schwachstellen

view advisory published 2023-05-01

Ein Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

describes (5)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-28950US	medium5.5	0.18% (7th)	—	2023-05-19
IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.
CVE-2023-28514US	medium5.5	0.18% (8th)	—	2023-05-19
IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID:…
CVE-2023-26285US	—	0.95% (61st)	—	2023-05-05
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.
CVE-2023-22874US	medium5.5	0.21% (10th)	—	2023-05-05
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.
CVE-2022-43919US	medium6.5	0.71% (53rd)	—	2023-05-05
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.