Check CVE Id
Check CWE Id
IBM WebShere MQ 18.104.22.168, 22.214.171.124, 9.1.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 152925.
IBM WebSphere MQ 126.96.36.199 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887.
IBM WebSphere 188.8.131.52 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915.
IBM WebSphere MQ 184.108.40.206 through 220.127.116.11, 18.104.22.168 through 22.214.171.124, 9.0.1 through 9.0.5, and 126.96.36.199 could allow a local user to inject code that could be executed with root privileges. IBM X-Force ID: 148947.
IBM WebSphere MQ 8.0 through 9.1 is vulnerable to a error with MQTT topic string publishing that can cause a denial of service attack. IBM X-Force ID: 145456.
IBM WebSphere MQ 188.8.131.52 through 184.108.40.206 and 220.127.116.11 through 18.104.22.168 could allow users to have more authority than they should have if an MQ administrator creates an invalid user group name. IBM X-Force ID: 142888.
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause messages to no longer be transmitted via the affected channel. IBM X-Force ID: 141339.
IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142598.
An IBM WebSphere MQ (Maintenance levels 22.214.171.124 - 126.96.36.199, 188.8.131.52 - 184.108.40.206, 220.127.116.11 - 18.104.22.168, 22.214.171.124 - 126.96.36.199, and 9.0.0 - 9.0.4) client connecting to a Queue Manager could cause a SIGSEGV in the Channel process amqrmppa. IBM X-Force ID: 137775.
IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ PAM code which could result in a denial of service. IBM X-Force ID: 138949.
Back to Top