PT-2019-17147 · Ibm · Ibm Mq

Published 2019-12-30 · Updated 2021-07-21 · CVE-2019-4655

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1.0.0 through 9.1.3

Description The issue allows an authenticated user to reset client connections due to an error within the Data Conversion routine, resulting in a denial of service attack.

Recommendations For IBM MQ versions 9.1.0.0 through 9.1.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-4655

Affected Products

Ibm Mq

References · 4

• https://osv.dev/vulnerability/CVE-2019-4655 · Vendor Advisory
• https://ibm.com/support/pages/node/1106529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4655 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/170966 · Vendor Advisory