DeutschShown in its original language — a full translation is planned for a future version.
IBM MQ: Mehrere Schwachstellen
view advisory published 2025-02-27
Ein lokaler Angreifer kann mehrere Schwachstellen in IBM MQ und der MQ Console ausnutzen, um Informationen offenzulegen, einen Denial of Service auszulösen oder beliebigen Programmcode auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54175US | — | — | ||
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD
could allow a local user to cause a denial of service due to an improper check for unusual or exceptional conditions. | ||||
| CVE-2025-23225US | — | — | ||
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue. | ||||
| CVE-2025-0975US | — | — | ||
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters. | ||||
| CVE-2024-54173US | — | — | ||
IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled. | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-0459 - CSAF Versionself
- WID-SEC-2025-0459 - Portal Versionself
- IBM Security Bulletin 7184322 vom 2025-02-27external
- IBM Security Bulletin 7184325 vom 2025-02-27external
- IBM Security Bulletin 7184327 vom 2025-02-27external
- IBM Security Bulletin 7184342 vom 2025-02-27external
- IBM Security Bulletin 7184453 vom 2025-02-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan