CVE-2022-31772: IBM MQ denial of service
Published Nov 11, 2022
·Updated
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels. IBM X-Force ID: 228335.
Affected Software
14 affected componentsFixes available
IBM Sterling Secure Proxy<=6.0.3
IBM MQ=8.0.0.0
IBM MQ=9.0.0.0
IBM MQ=9.1.0
IBM MQ=9.1.0.0
IBM MQ=9.2.0
IBM MQ=9.2.0
HP HP-UX
IBM AIX
IBM i
IBM Linux On Ibm Z
Linux Linux kernel
Microsoft Windows
Oracle Solaris
Remediation
Patch Available
Event History
Nov 11, 2022
CVE Published
via MITRE·06:56 PM
Data Sourced
via MITRE·06:56 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-31772.
2
What is the severity rating of CVE-2022-31772?
The severity rating of CVE-2022-31772 is medium (6.5).
3
Which software versions are affected by CVE-2022-31772?
IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS are affected by CVE-2022-31772.
4
How can an authenticated and authorized user exploit CVE-2022-31772?
An authenticated and authorized user can exploit CVE-2022-31772 to cause a denial of service to the MQTT channels.
5
Is there a patch available to fix CVE-2022-31772?
Yes, there is a patch available to fix CVE-2022-31772. Please refer to the IBM support page for more information.