PT-2020-18035 · Ibm · Ibm Mq+2

Published 2020-07-01 · Updated 2020-07-07 · CVE-2020-4376

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 8.0.4 through 8.1.0 IBM MQ Appliance versions 8.0.4 through 8.1.0 IBM MQ for HPE NonStop versions 8.0.4 through 8.1.0

Description The issue is caused by an error within the pubsub logic, allowing an attacker to cause a denial of service.

Recommendations For IBM MQ versions 8.0.4 through 8.1.0, update to a version that includes the fix for the pubsub logic error. For IBM MQ Appliance versions 8.0.4 through 8.1.0, update to a version that includes the fix for the pubsub logic error. For IBM MQ for HPE NonStop versions 8.0.4 through 8.1.0, update to a version that includes the fix for the pubsub logic error.

Fix

Related Identifiers

CVE-2020-4376

Affected Products

Ibm Mq

Ibm Mq Appliance

Ibm Mq For Hpe Nonstop

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/179081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4376 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4376 · Vendor Advisory
• https://ibm.com/support/pages/node/6242364 · Vendor Advisory
• https://t.me/cvenotify/4770 · Telegram Post