← Back

CVE-2024-25015

nvd nist
Published: May 1, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. IBM X-Force ID: 281278.

Affected (3)

Products: Ibm: Mq
Ibm
1 product
Mq
Configuration A
3 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Ibm
Mq
From 9.3.0 to 9.3.5
Mq
From 9.2.0.0 to 9.2.0.25
Mq
From 9.3.0.0 to 9.3.0.17
Running on/withPlatform Versions
Ibm
Aix
All versions
Ibm
Linux On Ibm Z
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-406
Insufficient Control of Network Message Volume (Network Amplification)
The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.

References (4)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.