CVE-2024-25015

published 2024-05-01

CVE-2024-25015: IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all…

Priority P3 36 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. IBM X-Force ID: 281278.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq	>= 9.2.0.0 < 9.2.0.25	9.2.0.25
ibm	mq	>= 9.3.0 < 9.3.5	9.3.5
ibm	mq	>= 9.3.0.0 < 9.3.0.17	9.3.0.17

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-406