PT-2019-16863 · Ibm · Ibm Mq

Josh Mciver · Published 2019-08-20 · Updated 2022-01-01 · CVE-2019-4049

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.1

Description The issue allows a local user to cause a denial of service by filling up the disk space of the underlying filesystem using the error logging service.

Recommendations For IBM MQ versions 9.1.0.0 through 9.1.1, consider restricting access to the error logging service to prevent local users from filling up the disk space. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2019-4049

Affected Products

Ibm Mq

References · 4

• https://ibm.com/support/docview.wss?uid=ibm10870490 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/156398 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4049 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4049 · Security Note