IBM MQ Vulnerable to Denial of Service Attack

CVE-2024-35116

What is CVE-2024-35116?

IBM MQ versions 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD are susceptible to a denial of service (DoS) attack due to mishandling of configuration changes. This vulnerability allows attackers to disrupt service availability by exploiting errors in the configuration application process, rendering systems unresponsive. Organizations using affected versions of IBM MQ should ensure they are taking the necessary steps to patch or mitigate against potential threats posed by this issue.

References