CVE-2022-43902

published 2023-03-10

CVE-2022-43902: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID…

Priority P3 35 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq_appliance	—	—
ibm	mq_appliance	—	—
ibm	mq_appliance	—	—
ibm	mq_appliance	>= 9.2.0.0 < 9.2.0.8	9.2.0.8
ibm	mq_appliance	>= 9.2.0.0 < 9.2.5	9.2.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.