Vulnerabilities > CVE-2020-4682 - Deserialization of Untrusted Data vulnerability in IBM MQ, MQ Appliance and Websphere MQ

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
ibm
CWE-502
critical
NVD
Published: 2021-01-28
Updated: 2021-02-02

Summary

IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.

Vulnerable Configurations

Part Description Count
Application
Ibm
47

Common Weakness Enumeration (CWE)

References