Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Denial-of-Service-Zustand zu erzeugen.
Product
IBM MQ ist eine Message Oriented Middleware von IBM.
Vulnerabilities 2
-
High 8.1
IBM MQ Container authentication bypass
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.
-
Medium 5.9
IBM MQ Container denial of service
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources…
Revision history
-
#1
Initiale Fassung
References
-
IBM X-Force vom 2024-07-08
https://exchange.xforce.ibmcloud.com/vulnerabilities/297169
-
IBM X-Force vom 2024-07-08
https://exchange.xforce.ibmcloud.com/vulnerabilities/297172
-
IBM Security Bulletin vom 2024-07-08
https://www.ibm.com/support/pages/node/7159714