PT-2023-21771 · Ibm · Ibm Mq Appliance+1

Published 2023-07-19 · Updated 2025-08-02 · CVE-2023-28513

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.0 LTS through 9.3 LTS IBM MQ versions 9.2 CD through 9.3 CD IBM MQ Appliance versions 9.2 LTS through 9.3 LTS IBM MQ Appliance versions 9.2 CD through 9.2 LTS

Description The issue is caused by an error processing messages, which can lead to a denial of service attack under certain configurations.

Recommendations For IBM MQ versions 9.0 LTS through 9.3 LTS, update to a version that includes the fix for this issue. For IBM MQ versions 9.2 CD through 9.3 CD, update to a version that includes the fix for this issue. For IBM MQ Appliance versions 9.2 LTS through 9.3 LTS, update to a version that includes the fix for this issue. For IBM MQ Appliance versions 9.2 CD through 9.2 LTS, update to a version that includes the fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-28513

Affected Products

Ibm Mq

Ibm Mq Appliance

References · 7

• https://ibm.com/support/pages/node/7007421 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28513 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/250397 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28513 · Security Note
• https://ibm.com/support/pages/node/7007731 · Vendor Advisory
• https://twitter.com/grok/status/1951772691335373207 · Twitter Post
• https://t.me/cibsecurity/66982 · Telegram Post