WID-SEC-W-2024-1466

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM MQ: Mehrere Schwachstellen

view advisory published 2024-06-26

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-35156USmedium6.5—
IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could…
CVE-2024-35116UShigh7.5—
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. IBM X-Force ID: 290335.
CVE-2024-35155USmedium6.5—
IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.…
CVE-2024-31919UShigh7.5—
IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit…
CVE-2024-31912UShigh8.8—
IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. IBM X-Force ID: 28989…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan