PT-2024-34643 · Ibm · Ibm Mq Appliance+2

Published 2024-12-18 · Updated 2024-12-19 · CVE-2024-51470

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1 LTS through 9.4 CD IBM MQ Appliance versions 9.3 LTS through 9.4 LTS IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.25

Description The issue could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.

Recommendations For IBM MQ versions 9.1 LTS through 9.4 CD, update to a version that includes the fix for this issue. For IBM MQ Appliance versions 9.3 LTS through 9.4 LTS, update to a version that includes the fix for this issue. For IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.25, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2024-51470

Affected Products

Ibm Mq

Ibm Mq Appliance

Ibm Mq For Hpe Nonstop

References · 8

• https://ibm.com/support/pages/node/7177593 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51470 · Security Note
• https://ibm.com/support/pages/node/7178085 · Vendor Advisory
• https://ibm.com/support/pages/node/7179137 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-51470 · Vendor Advisory
• https://t.me/cvedetector/13243 · Telegram Post
• https://twitter.com/CVEnew/status/1869476766881832964 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1869570657203138700 · Twitter Post