CVE-2020-4319: Medium severity ibm websphere mq appliance vulnerability
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop 8.0, 9.1 LTS, and 9.1 CD could allow under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic. IBM X-Force ID: 177402.
Other sources
IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop could allow, under special circumstances, an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4319?
CVE-2020-4319 is a vulnerability found in IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop, which could allow an authenticated user to obtain sensitive information due to a data leak from an error message within the pre-v7 pubsub logic.
What is the severity of CVE-2020-4319?
The severity of CVE-2020-4319 is rated as medium (4.3).
Which software versions are affected by CVE-2020-4319?
IBM MQ Appliance versions between 8.0 and 8.0.0.15, 9.1 LTS versions between 9.1.0.0 and 9.1.0.6, and 9.1 CD versions are affected by CVE-2020-4319.
How can an authenticated user exploit CVE-2020-4319?
An authenticated user can exploit CVE-2020-4319 by exploiting a data leak from an error message within the pre-v7 pubsub logic.
Is there a fix available for CVE-2020-4319?
Yes, IBM has provided fixes for the affected versions of IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop to address the vulnerability.