CVE-2024-51471
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 19, 2024
CWE ID 125
Summary
CVE-2024-51471 is a denial-of-service vulnerability affecting the IBM MQ Appliance versions 9.3 LTS, 9.3 CD, and 9.4 LTS. An authenticated user, when trace is enabled, can write information outside of the intended buffer size in the web console, causing memory overflow and resulting in a denial-of-service condition. This issue may disrupt the availability of the affected system. IBM strongly recommends disabling the trace feature or applying the appropriate security patch to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.