PT-2024-34643

CVE-2024-51470

·

Published

2024-12-18

·

Updated

2024-12-19

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions IBM MQ versions 9.1 LTS through 9.4 CD IBM MQ Appliance versions 9.3 LTS through 9.4 LTS IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.25
Description The issue could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.
Recommendations For IBM MQ versions 9.1 LTS through 9.4 CD, update to a version that includes the fix for this issue. For IBM MQ Appliance versions 9.3 LTS through 9.4 LTS, update to a version that includes the fix for this issue. For IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.25, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾