First published: Thu Apr 27 2023(Updated: )
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM MQ Appliance | <=9.2.CD | |
IBM MQ Appliance | <=9.2.LTS | |
IBM MQ Appliance | <=9.3.LTS | |
IBM MQ Appliance | <=9.3.CD | |
IBM MQ Appliance | >=9.2.0.0<9.2.0.11 | |
IBM MQ Appliance | >=9.2.0.0<9.2.5.7 | |
IBM MQ Appliance | >=9.3.0.0<9.3.0.5 | |
IBM MQ Appliance | >=9.3.0.0<9.3.2.1 | |
<=9.3 LTS | ||
<=9.2 CD | ||
<=9.2 LTS | ||
<=9.3 CD |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2023-26285.
The severity rating of CVE-2023-26285 is medium (5.9).
The affected software is IBM MQ Appliance versions 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS.
This vulnerability can cause a denial of service.
Please refer to IBM's support page for information on available fixes and patches for CVE-2023-26285.