Denial of Service Vulnerability in IBM MQ Appliance 9.2 Series
CVE-2021-38958

5.1MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
30 November 2021

Summary

IBM MQ Appliance versions 9.2 CD and 9.2 LTS are susceptible to a denial of service (DoS) vulnerability, resulting from a concurrency issue. An attacker could leverage this flaw to disrupt service availability, potentially affecting the performance and reliability of critical applications reliant on this messaging platform. It is important for organizations utilizing these products to implement necessary patches and mitigation strategies to safeguard against potential exploitation.

Affected Version(s)

MQ Appliance 9.2.0.0

MQ Appliance 9.2.1

MQ Appliance 9.2.0.1

References

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.