CVE-2019-4656: Medium severity ibm websphere mq appliance vulnerability
IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processing error messages. IBM X-Force ID: 170967.
Other sources
IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack that would allow an authenticated user to craft a malicious message causing a queue manager to incorrectly mark a queue as damaged, requiring a restart to continue processing against the queue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4656?
The severity of CVE-2019-4656 is medium with a CVSS score of 6.5.
Which IBM products are affected by CVE-2019-4656?
IBM MQ and IBM MQ Appliance versions 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD are affected by CVE-2019-4656.
What type of vulnerability is CVE-2019-4656?
CVE-2019-4656 is a denial of service vulnerability.
How can an attacker exploit CVE-2019-4656?
An authenticated user can exploit CVE-2019-4656 by crafting a malicious message, causing a queue manager to incorrectly mark a queue as damaged.
Is CVE-2019-4656 affecting non-IBM software?
No, CVE-2019-4656 does not affect HP-UX, IBM AIX, Linux kernel, Microsoft Windows, or Oracle Solaris.