CVE-2024-52897

published 2024-12-19

CVE-2024-52897: IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error…

Priority P4 23 medium 6.2 CVSS 3.1

AV L AC L PR N UI N S U C H I N A N

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	mq	—	—
ibm	mq	>= 9.2.0.0 < 9.2.0.30	9.2.0.30
ibm	mq	>= 9.3.0 < 9.4.1	9.4.1
ibm	mq	>= 9.3.0.0 < 9.3.0.26	9.3.0.26
ibm	mq	>= 9.4.0.0 < 9.4.0.7	9.4.0.7

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-209