IBM MQ is affected by a denial of service vulnerability

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message selection parameters.

Üreticinin çözüm notu (İngilizce)

This issue was addressed under Known Issue DT500603.

IBM MQ version 9.2 LTS

Apply cumulative security update 9.2.0.46 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts

IBM MQ version 9.3 LTS

Apply cumulative security update 9.3.0.43 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts

IBM MQ version 9.4 LTS

Apply fix pack 9.4.0.30 https://www.ibm.com/support/pages/downloading-ibm-mq-94

IBM MQ version 10.0.LTS

Upgrade to IBM MQ version 10.0.0.6 https://www.ibm.com/support/pages/downloading-ibm-mq-100

IBM MQ version 9.4 CD and 10.0 CD

Upgrade to IBM MQ version 10.0.1.0 https://www.ibm.com/support/pages/downloading-ibm-mq-100

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• ibm.com/support/pages/node/7294502 Yama

Kayıt geçmişi

1. 4 Kas 2026 23:25Yayımlandı

İlgili açıklar

• 7,5 CVE-2026-10859IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerability
• 8,8 CVE-2026-11376IBM MQ is affected by a denial of service vulnerability
• 8,5 CVE-2026-11724IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
• 7,5 CVE-2026-12356IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability
• 8,1 CVE-2026-13271IBM MQ Managed File Transfer is affected by a denial of service vulnerability
• 7,1 CVE-2026-13284IBM MQ Managed File Transfer is vulnerable to XML external entity injection