CVE-2024-52897 - IBM MQ information disclosure

Back Back to CVE browser

MEDIUM

IBM MQ information disclosure

Published Dec 19, 2024

6.2

MEDIUM

CVSS 3.1

EPSS 0.21%

Description

IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned.

Affected products

Vendor IBM Product MQ Default
unaffected
- Version
  9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

unaffected

Version	Status	Constraints
9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-209

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46226
Advisory
https://www.ibm.com/support/pages/node/7179151
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46226		Advisory
https://www.ibm.com/support/pages/node/7179151		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Dec 19, 2024

Updated Jan 14, 2025

Reserved Nov 17, 2024

Link CVE-2024-52897

CISA Vulnrichment

Updated Dec 20, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-52897

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-52897

ENISA EUVD

Assigner ibm

Published Dec 19, 2024

Updated Jan 14, 2025

Exploited since n/a

Link EUVD-2024-46226

EUVD-2024-46226