WID-SEC-W-2023-1824

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM MQ: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2020-06-16

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM MQ und IBM WebSphere MQ ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2020-4320USmedium6.5—
IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM…
CVE-2020-4310UShigh7.5—
IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to an error within the Data Conversion logic. IBM X-Force ID: 17…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan