← Back

CVE-2020-4320

nvd nist
Published: Jun 16, 2020Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.

Affected (4)

Products: Ibm: Mq
Ibm
1 product
Mq
Configuration A
4 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Ibm
Mq
From 8.0.0.0 to 8.0.0.15
Mq
From 9.1.0 to 9.1.5
Mq
From 9.0.0.0 to 9.0.0.10
Mq
From 9.1.0.0 to 9.1.0.5
Running on/withPlatform Versions
Hp
Hp Ux
All versions
Ibm
Aix
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Oracle
Solaris
All versions

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.