CVE-2020-4320

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-16 · updated 2026-06-17
Weakness: CWE-295

Description

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.

Affected products

IBM MQ: from 8.0.0.0 before 8.0.0.15; from 9.0.0.0 before 9.0.0.10; from 9.1.0 before 9.1.5; from 9.1.0.0 before 9.1.0.5 — fixed in 8.0.0.15, 9.0.0.10, 9.1.0.5, 9.1.5

How to fix

Upgrade to a fixed version: IBM MQ 8.0.0.15, 9.0.0.10, 9.1.0.5, 9.1.5. Check the vendor advisory for mitigations.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/177403
https://www.ibm.com/support/pages/node/5736885
https://exchange.xforce.ibmcloud.com/vulnerabilities/177403
https://www.ibm.com/support/pages/node/5736885

Get alerted when CVE-2020-4320 or the next vulnerability affects your stack