Medium WID-SEC-2023-0613 1 CVE

IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen

Published Mar 9, 2023 · Updated Mar 9, 2023 · de-DE

Vendor: IBM Product: MQ Product: MQ 9.0 LTS Product: MQ 9.1 CD Product: MQ 9.1 LTS Product: MQ 9.2 CD Product: MQ 9.2 LTS Product: MQ 9.3 CD Product: MQ 9.3 LTS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM MQ ausnutzen, um Informationen offenzulegen.

Product

IBM MQ ist eine Message Oriented Middleware von IBM.

Vulnerabilities 1

Medium 6.5

CVE-2021-37533

Apache Commons Net's FTP client trusts the host from PASV response by default

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…

Apache Software Foundation Apache Commons Net druid libcommons-net-java Debian Ubuntu Wolfi Maven

Dec 3, 2022

Revision history

2023-03-09 #1
Initiale Fassung

References

IBM Security Bulletin: 6838559 vom 2023-03-09
https://www.ibm.com/support/pages/node/6962429