IBM MQ Denial of Service Vulnerability

CVE-2024-25015

What is CVE-2024-25015?

A vulnerability in IBM MQ products allows for a denial of service that can be triggered by remote attackers. By sending specially crafted HTTP requests, a remote user could exhaust the system's available resources, leading to service disruption. This affects multiple versions of IBM MQ, including 9.2 LTS and 9.3 LTS. Organizations using these versions are advised to implement measures to mitigate the risk and monitor for suspicious activities. Further details can be found in IBM's vendor advisory.

References