Skip to content
OpenAdvisories
High WID-SEC-2025-0459 4 CVEs

IBM MQ: Mehrere Schwachstellen

Published Feb 27, 2025 · Updated Feb 27, 2025 · de-DE

Vendor: IBM Product: MQ Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM MQ und der MQ Console ausnutzen, um Informationen offenzulegen, einen Denial of Service auszulösen oder beliebigen Programmcode auszuführen.

Product

IBM MQ ist eine Message Oriented Middleware von IBM.

Vulnerabilities 4

  • High 8.8
    CVE-2025-0975

    IBM MQ code execution

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.

    IBM MQ
  • Medium 6.5
    CVE-2025-23225

    IBM MQ denial of service

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.

    IBM MQ
  • Medium 5.5
    CVE-2024-54175

    IBM MQ denial of service

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow a local user to cause a denial of service due to an improper check for unusual or exceptional conditions.

    IBM MQ
  • Medium 4.7
    CVE-2024-54173

    IBM MQ information disclosure

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled.

    IBM MQ

Revision history

  1. #1

    Initiale Fassung

References