CVE-2019-4378: Medium severity ibm disconnected log collector vulnerability
IBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vulnerable to a denial of service attack caused by an authenticated and authorized user using specially crafted PCF messages. IBM X-Force ID: 162084.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4378?
The severity of CVE-2019-4378 is medium with a score of 5.3.
Which versions of IBM MQ are affected by CVE-2019-4378?
IBM MQ versions 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 are affected by CVE-2019-4378.
What is the vulnerability description of CVE-2019-4378?
CVE-2019-4378 is a denial of service vulnerability in IBM MQ command server, which can be exploited by an authenticated and authorized user using specially crafted PCF messages.
How can I fix CVE-2019-4378?
To fix CVE-2019-4378, IBM MQ users should apply the necessary security patches provided by IBM.
Where can I find more information about CVE-2019-4378?
More information about CVE-2019-4378 can be found at the IBM X-Force ID 162084 and the IBM support page.