PT-2021-12158 · Ibm · Ibm Mq

Published 2021-01-28 · Updated 2021-02-02 · CVE-2020-4682

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM MQ versions 7.5 through 9.2 CD

Description The issue is caused by an unsafe deserialization of trusted data, allowing a remote attacker to execute arbitrary code on the system. An attacker could exploit this to execute arbitrary code on the system.

Recommendations For IBM MQ versions 7.5 through 9.2 CD, update to a version that includes a fix for the unsafe deserialization of trusted data to prevent remote code execution.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2020-4682

Affected Products

Ibm Mq

References · 5

• https://ibm.com/support/pages/node/6408626 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/186509 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4682 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4682 · Vendor Advisory
• https://t.me/cibsecurity/22784 · Telegram Post