WID-SEC-W-2023-1825

DeutschShown in its original language — a full translation is planned for a future version.

IBM MQ: Mehrere Schwachstellen

view advisory published 2020-04-16

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-4338US	medium5.5	0.33% (26th)	—	2020-04-16
IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data. IBM X-Force ID: 177937.
CVE-2019-4762US	high7.5	1.60% (76th)	—	2020-04-16
IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X-Force ID: 173625.

references

External citations — patches, advisories, analysis.

WID-SEC-W-2023-1825 - CSAF Versionself
WID-SEC-2023-1825 - Portal Versionself
IBM Security Bulletin vom 2020-04-16external
IBM Security Bulletin 7013143 vom 2023-07-19external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan