CVE-2024-52897
CVSS 3.1 Score 6.2 of 10 (medium)
Details
Published Dec 19, 2024
Updated: Jan 10, 2025
CWE ID 209
Summary
CVE-2024-52897 is a vulnerability affecting IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console versions. Maliciously crafted requests can trigger the console to return detailed technical error messages, revealing sensitive information to remote attackers. The vulnerability may enable unauthorized access to confidential data, posing a significant threat to organizational security. IBM strongly advises users to apply the available patches to mitigate this issue and prevent potential data breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- IBM MQ
Affected Vendors
- IBM Corporation