CVE-2024-51470

CWE-7543 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 70.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM MQ ApplianceIBM MQ FOR HPE NonstopIBM MQ
Timeline
PublishedDec 18

Description

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD, IBM MQ Appliance 9.3 LTS, 9.3 CD, 9.4 LTS, and IBM MQ for HPE NonStop 8.1.0 through 8.1.0.25 could allow an authenticated user to cause a denial-of-service due to messages with improperly set values.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

▶NVDibm/mq_appliance9.1.0.0 — 9.1.0.26+3
▶CVEListV5ibm/mq_for_hpe_nonstop8.1.0 — 8.1.0.25
▶CVEListV5ibm/mq_appliance9.3 LTS, 9.3 CD, 9.4 LTS
▶NVDibm/mq8.1.0 — 8.1.0.26
▶CVEListV5ibm/mq9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD

🔴Vulnerability Details

2
CVEList
IBM MQ denial of service↗2024-12-18
▶
GHSA
GHSA-2663-jm96-pp8f: IBM MQ 9↗2024-12-18
▶
CVE-2024-51470 (MEDIUM CVSS 6.5) | IBM MQ 9.1 LTS | cvebase.io