Permissions, Privileges, and Access Controls in IBM MQ - CVE-2024-31912

Vulnerability identifier: #VU93441

CSH Severity: Medium

CVSS v4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-31912

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.

IBM MQ
IBM MQ Operator
WebSphere Remote Server
IBM Robotic Process Automation
Virtualization Engine TS7700 3957-VED
IBM Virtualization Engine TS7700 3948-VED
Robotic Process Automation for Cloud Pak

Install updates from vendor's website.

IBM MQ - addressed in versions 9.3.0.20, 9.4
IBM MQ Operator - addressed in versions 9.3.0.20-r1, 9.4.0.0-r2
Virtualization Engine TS7700 3957-VED - addressed in versions 8.53.1.21 VTD_EXEC.405, 8.54.0.68 VTD_EXEC.405, 8.54.1.27 VTD_EXEC.405
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.53.1.21 VTD_EXEC.405, 8.54.0.68 VTD_EXEC.405, 8.54.1.27 VTD_EXEC.405
IBM Robotic Process Automation - addressed in versions 21.0.7.18, 23.0.18
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.18, 23.0.18

• https://www.ibm.com/support/pages/node/7158072

• Multiple vulnerabilities in IBM MQ
• Multiple vulnerabilities in IBM WebSphere Remote Server
• Multiple vulnerabilities in IBM System Storage Virtualization Engine TS7700
• Multiple vulnerabilities in IBM Robotic Process Automation
• Multiple vulnerabilities in IBM MQ Operator