Skip to content
OpenAdvisories
Medium WID-SEC-2024-3732 4 CVEs

IBM MQ: Mehrere Schwachstellen

Published Dec 18, 2024 · Updated Jan 30, 2025 · Revision 2 · de-DE

Vendor: IBM Product: MQ Platform: Windows

Summary

Ein lokaler oder ein entfernter authentisierter Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um Informationen preiszugeben oder einen Denial-of-Service-Zustand zu erzeugen.

Product

IBM MQ ist eine Message Oriented Middleware von IBM.

Vulnerabilities 4

  • Medium 6.5
    CVE-2024-51470

    IBM MQ denial of service

    IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.

    IBM MQ MQ Appliance MQ for HPE NonStop
  • Medium 6.2
    CVE-2024-52896

    IBM MQ information disclosure

    IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

    IBM MQ
  • Medium 6.2
    CVE-2024-52897

    IBM MQ information disclosure

    IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

    IBM MQ
  • Medium 6.2
    CVE-2024-52898

    IBM MQ information disclosure

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a local user to obtain sensitive information when a detailed technical error message is returned.

    IBM MQ

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References