Denial of Service Vulnerability in IBM MQ and MQ Appliance Products
CVE-2020-4310

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Websphere MQ
MQ
Vendor
CVE Published:
16 June 2020

Summary

IBM MQ and MQ Appliance products are susceptible to a denial of service attack caused by a flaw in the Data Conversion logic. This vulnerability could potentially allow attackers to disrupt service availability, impacting critical operations. To mitigate risks, users are encouraged to apply relevant patches and monitor for suspicious activities.

Affected Version(s)

MQ 8.0

MQ 9.0.LTS

MQ 9.1.LTS

References

https://www.ibm.com/support/pages/node/6223914
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/177081
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.