Denial of Service Vulnerability in IBM MQ by IBM
CVE-2020-4870

5.9MEDIUM

Key Information:

Vendor

IBM
Status
MQ
MQ Appliance
Vendor
CVE Published:
21 December 2020

What is CVE-2020-4870?

IBM MQ versions 9.2 CD and LTS are susceptible to a denial of service attack due to improper handling of connecting applications. This vulnerability can disrupt application connectivity, making it crucial for organizations using these products to ensure their environments are properly secured against potential attacks.

Affected Version(s)

MQ 9.2.0

MQ Appliance 9.2.0.0

References

https://www.ibm.com/support/pages/node/6380742
x_refsource_CONFIRM
https://www.ibm.com/support/pages/node/6386466
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/190833
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-4870 : Denial of Service Vulnerability in IBM MQ by IBM