CVE-2024-25015: IBM MQ denial of service
IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. IBM X-Force ID: 281278.
Other sources
IBM MQ Internet Pass-Thru could allow a remote user to cause a denial of service by sending HTTP requests that would consume all available resources.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25015?
The severity of CVE-2024-25015 is classified as high due to its potential to cause a denial of service.
How do I fix CVE-2024-25015?
To fix CVE-2024-25015, it is recommended to update IBM MQ to a version that is not affected, such as the latest LTS or CD release.
What products are affected by CVE-2024-25015?
CVE-2024-25015 affects IBM MQ versions up to and including 9.2 LTS, 9.3 LTS, and 9.3 CD.
Can CVE-2024-25015 be exploited remotely?
Yes, CVE-2024-25015 can be exploited remotely by sending specially crafted HTTP requests.
What impact does CVE-2024-25015 have on IBM MQ?
CVE-2024-25015 can lead to a denial of service, causing IBM MQ to become unresponsive due to resource exhaustion.