HIGH🇵🇱 Wersja polska

CVE-2024-31912

CVSS 7.5v3.1pub. 2024-06-28upd. 2024-11-21

IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. IBM X-Force ID: 289894.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • IBM Mq

    APP
    Ibm
    9.3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-22489CRITICAL9.1PL ✓same product

IBM MQ — podatność XXE umożliwiająca ujawnienie danych i wyczerpanie zasobów

CVE-2020-4682CRITICAL9.8PL ✓same product

RCE poprzez niebezpieczną deserializację w IBM MQ

CVE-2025-36128HIGH7.5same product

IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforce...

CVE-2024-25015HIGH7.5same product

IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service ...

CVE-2024-25016HIGH7.5same product

IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to...