CVE-2022-43919 – IBM MQ denial of service
https://notcve.org/view.php?id=CVE-2022-43919
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354. • https://exchange.xforce.ibmcloud.com/vulnerabilities/241354 https://www.ibm.com/support/pages/node/6986559 • CWE-20: Improper Input Validation •
CVE-2022-43902 – IBM MQ denial of service
https://notcve.org/view.php?id=CVE-2022-43902
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240832 https://www.ibm.com/support/pages/node/6890643 •
CVE-2022-40230
https://notcve.org/view.php?id=CVE-2022-40230
"IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD, and LTS 9.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235532." "IBM MQ Appliance 9.2 CD, 9.2 LTS, 9.3 CD y LTS 9.3 no invalidan la sesión después del cierre de sesión, lo que podría permitir a un usuario autenticado hacerse pasar por otro usuario en el sistema. ID de IBM X-Force: 235532". • https://www.ibm.com/support/pages/node/6622051 • CWE-613: Insufficient Session Expiration •