Skip to content
OpenAdvisories
Medium WID-SEC-2023-1115 5 CVEs

IBM MQ: Mehrere Schwachstellen

Published May 1, 2023 · Updated Jun 8, 2023 · Revision 3 · de-DE

Vendor: IBM Product: MQ Product: MQ 8.0 Product: MQ 8.1 Product: MQ 9.0 LTS Product: MQ 9.2 CD Product: MQ 9.2 LTS Product: MQ 9.2.0 Product: MQ 9.3 CD Product: MQ 9.3 LTS Product: MQ 9.3.0 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

Product

IBM MQ ist eine Message Oriented Middleware von IBM.

Vulnerabilities 5

  • Medium 6.2
    CVE-2023-28514

    IBM MQ information disclosure

    IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.

    IBM MQ
  • Medium 5.9
    CVE-2023-26285

    IBM MQ denial of service

    IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.

    IBM MQ
  • Medium 5.5
    CVE-2023-22874

    IBM MQ denial of service

    IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.

    IBM MQ
  • Medium 5.3
    CVE-2022-43919

    IBM MQ denial of service

    IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.

    IBM MQ
  • Medium 5.1
    CVE-2023-28950

    IBM MQ information disclosure

    IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.

    IBM MQ

Revision history

  1. #3

    Neue Updates von IBM aufgenommen

  2. #2

    Neue Updates von IBM aufgenommen

  3. #1

    Initiale Fassung

References