PT-2019-16863 · Ibm · Ibm Mq

Josh Mciver · Publicado 2019-08-20 · Atualizado 2022-01-01 · CVE-2019-4049

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.1

Description The issue allows a local user to cause a denial of service by filling up the disk space of the underlying filesystem using the error logging service.

Recommendations For IBM MQ versions 9.1.0.0 through 9.1.1, consider restricting access to the error logging service to prevent local users from filling up the disk space. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2019-4049

Produtos afetados

Ibm Mq

Referências · 4

• https://ibm.com/support/docview.wss?uid=ibm10870490 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/156398 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-4049 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4049 · Nota de Segurança