CVE-2021-38958
https://notcve.org/view.php?id=CVE-2021-38958
IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Force ID: 212042 IBM MQ Appliance versiones 9.2 CD y 9.2 LTS, está afectado por un ataque de denegación de servicio causado por un problema de concurrencia. IBM X-Force ID: 212042 • https://exchange.xforce.ibmcloud.com/vulnerabilities/212043 https://www.ibm.com/support/pages/node/6519420 •
CVE-2021-38875
https://notcve.org/view.php?id=CVE-2021-38875
IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398. IBM MQ versiones 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD y 9.2 CD, es vulnerable a un ataque de denegación de servicio causado por un error de procesamiento de mensajes. IBM X-Force ID: 208398 • https://exchange.xforce.ibmcloud.com/vulnerabilities/208398 https://www.ibm.com/support/pages/node/6517672 •
CVE-2021-38949
https://notcve.org/view.php?id=CVE-2021-38949
IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403. IBM MQ versiones 7.5, 8.0, 9.0 LTS, 9.1 CD y 9.1 LTS, almacena las credenciales de usuario en texto sin cifrar que puede ser leído por un usuario local. IBM X-Force ID: 211403 • https://exchange.xforce.ibmcloud.com/vulnerabilities/211403 https://www.ibm.com/support/pages/node/6516424 • CWE-312: Cleartext Storage of Sensitive Information •
CVE-2021-29843
https://notcve.org/view.php?id=CVE-2021-29843
IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203. IBM MQ versión 9.1 LTS, 9.1 CD, 9.2 LTS y 9.2 CD, es vulnerable a un ataque de denegación de servicio causado por un problema de procesamiento de las propiedades de los mensajes. IBM X-Force ID: 205203 • https://exchange.xforce.ibmcloud.com/vulnerabilities/205203 https://www.ibm.com/support/pages/node/6513681 •
CVE-2020-4938
https://notcve.org/view.php?id=CVE-2020-4938
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815. IBM MQ Appliance versiones 9.1 y 9.2, es vulnerable a un ataque de tipo cross-site request forgery, lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas desde un usuario en el que el sitio web confía. IBM X-Force ID: 191815 • https://exchange.xforce.ibmcloud.com/vulnerabilities/191815 https://www.ibm.com/support/pages/node/6466717 • CWE-352: Cross-Site Request Forgery (CSRF) •