CVE-2022-22355
https://notcve.org/view.php?id=CVE-2022-22355
IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application which could allow an attacker to cause a drop in performance. IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, son vulnerables a una denegación de servicio en el componente de inicio de sesión de la aplicación, lo que podría permitir a un atacante causar una caída del rendimiento • https://exchange.xforce.ibmcloud.com/vulnerabilities/220486 https://www.ibm.com/support/pages/node/6564711 •
CVE-2022-22316
https://notcve.org/view.php?id=CVE-2022-22316
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configured authorization checks. IBM X-Force ID: 218276. IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, podría permitir a un usuario autenticado y autorizado causar una denegación de servicio debido a comprobaciones de autorización configuradas incorrectamente. IBM X-Force ID: 218276 • https://exchange.xforce.ibmcloud.com/vulnerabilities/218276 https://www.ibm.com/support/pages/node/6560040 •
CVE-2021-39000
https://notcve.org/view.php?id=CVE-2021-39000
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensitive data within diagnostics. IBM X-Force ID: 213215. IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, podría permitir a un atacante local obtener información confidencial mediante la inclusión de datos confidenciales en los diagnósticos. IBM X-Force ID: 213215 • https://exchange.xforce.ibmcloud.com/vulnerabilities/213215 https://www.ibm.com/support/pages/node/6519422 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2021-38999
https://notcve.org/view.php?id=CVE-2021-38999
IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within trace. IBM MQ Appliance podría permitir a un atacante local obtener información confidencial mediante la inclusión de datos confidenciales en el rastreo • https://exchange.xforce.ibmcloud.com/vulnerabilities/213214 https://www.ibm.com/support/pages/node/6519418 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2021-38967
https://notcve.org/view.php?id=CVE-2021-38967
IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-Force ID: 212441. IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, podría permitir a un usuario local con privilegios inyectar y ejecutar código malicioso. IBM X-Force ID: 212441 • https://exchange.xforce.ibmcloud.com/vulnerabilities/212441 https://www.ibm.com/support/pages/node/6512826 • CWE-94: Improper Control of Generation of Code ('Code Injection') •