Lucene search

K
ibmIBM22D07DC2524C773B0462BE91C00B2C6CF8EDDBBABA31D5E8AD0EA183E44606B8
HistoryDec 11, 2020 - 8:12 p.m.

Security Bulletin: IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4592

2020-12-1120:12:15
www.ibm.com
13
ibm mq
hpe nonstop
cve-2020-4592
data corruption
vulnerability
it31663

EPSS

0.001

Percentile

19.6%

Summary

IBM MQ for HPE NonStop Server is affected by vulnerability CVE-2020-4592

Vulnerability Details

CVEID:CVE-2020-4592
**DESCRIPTION:**IBM MQ Appliance 9.1.CD and LTS could allow an authenticated user, under nondefault configuration to cause a data corruption attack due to an error when using segmented messages.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/184755 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM MQ for HPE NonStop 8.1.0
IBM MQ for HPE NonStop 8.0.4

Remediation/Fixes

IBM MQ V8 for HPE NonStop 8.1.0.6 IT31663 Install APAR IT31663

Workarounds and Mitigations

None

EPSS

0.001

Percentile

19.6%

Related for 22D07DC2524C773B0462BE91C00B2C6CF8EDDBBABA31D5E8AD0EA183E44606B8