DeutschShown in its original language — a full translation is planned for a future version.
IBM MQ: Mehrere Schwachstellen
view advisory published 2024-12-18
Ein lokaler oder ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um Informationen preiszugeben oder einen Denial-of-Service-Zustand zu erzeugen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-52898US | — | — | ||
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a local user to obtain sensitive information when a detailed technical error message is returned. | ||||
| CVE-2024-52897US | — | — | ||
IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. | ||||
| CVE-2024-52896US | — | — | ||
IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. | ||||
| CVE-2024-51470US | — | — | ||
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2024-3732 - CSAF Versionself
- WID-SEC-2024-3732 - Portal Versionself
- IBM Security Bulletin 7178085 vom 2024-12-19external
- IBM Security Bulletin 7179137 vom 2024-12-18external
- IBM Security Bulletin 7179150 vom 2024-12-18external
- IBM Security Bulletin 7179151 vom 2024-12-18external
- IBM Security Bulletin 7179152 vom 2024-12-18external
- IBM Security Bulletin 7182196 vom 2025-01-31external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan