PT-2024-34644 · Ibm · Ibm Mq Appliance

Published 2024-12-19 · Updated 2025-07-03 · CVE-2024-51471

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM MQ Appliance versions 9.3 LTS through 9.4 LTS

Description The web console of IBM MQ Appliance could allow an authenticated user to cause a denial-of-service when trace is enabled due to information being written into memory outside of the intended buffer size.

Recommendations For IBM MQ Appliance versions 9.3 LTS, 9.3 CD, and 9.4 LTS, consider disabling the trace feature as a temporary workaround until a patch is available. Restrict access to the web console to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-51471

Affected Products

Ibm Mq Appliance

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-51471 · Security Note
• https://ibm.com/support/pages/node/7178243 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-51471 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1869821692027047979 · Twitter Post
• https://twitter.com/CVEnew/status/1869797377910898742 · Twitter Post
• https://t.me/cvenotify/127655 · Telegram Post
• https://t.me/cvedetector/13352 · Telegram Post