{"id":"CVE-2026-1713","state":"PUBLISHED","title":"IBM MQ is affected by an authority vulnerablility","description":"IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD","publishedAt":"2026-03-03T20:28:42.869Z","updatedAt":"2026-03-03T20:49:10.824Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","source":"CISA-ADP"},"assigner":"ibm","products":["IBM MQ"],"affected":[{"vendor":"IBM","product":"MQ","versions":[{"version":"9.1.0.0","status":"affected","lessThanOrEqual":"9.1.0.33 LTS","versionType":"semver"},{"version":"9.2.0.0","status":"affected","lessThanOrEqual":"9.2.0.40 LTS","versionType":"semver"},{"version":"9.3.0.0","status":"affected","lessThanOrEqual":"9.3.0.36 LTS","versionType":"semver"},{"version":"9.30.0","status":"affected","lessThanOrEqual":"9.3.5.1 CD","versionType":"semver"},{"version":"9.4.0.0","status":"affected","lessThanOrEqual":"9.4.0.17 LTS","versionType":"semver"},{"version":"9.4.0.0","status":"affected","lessThanOrEqual":"9.4.4.1 CD","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.1.0.33:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.2.0.40:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.0.36:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.30.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.0.17:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.4.1:*:*:*:*:*:*:*"]}],"references":["https://www.ibm.com/support/pages/node/7261944"],"weaknesses":["CWE-305"],"ingestedAt":"2026-10-29T20:11:10.572Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/1xxx/CVE-2026-1713.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-1713","state":"PUBLISHED","datePublished":"2026-03-03T20:28:42.869Z","dateUpdated":"2026-03-03T20:49:10.824Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2026-01-30T18:45:45.742Z"},"containers":{"cna":{"title":"IBM MQ is affected by an authority vulnerablility","descriptions":[{"lang":"en","value":"IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 through 9.4.4.1 CD"}],"affected":[{"vendor":"IBM","product":"MQ","versions":[{"version":"9.1.0.0","status":"affected","lessThanOrEqual":"9.1.0.33 LTS","versionType":"semver"},{"version":"9.2.0.0","status":"affected","lessThanOrEqual":"9.2.0.40 LTS","versionType":"semver"},{"version":"9.3.0.0","status":"affected","lessThanOrEqual":"9.3.0.36 LTS","versionType":"semver"},{"version":"9.30.0","status":"affected","lessThanOrEqual":"9.3.5.1 CD","versionType":"semver"},{"version":"9.4.0.0","status":"affected","lessThanOrEqual":"9.4.0.17 LTS","versionType":"semver"},{"version":"9.4.0.0","status":"affected","lessThanOrEqual":"9.4.4.1 CD","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:mq:9.1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.1.0.33:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.2.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.2.0.40:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.0.36:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.30.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.0.17:*:*:*:*:*:*:*","cpe:2.3:a:ibm:mq:9.4.4.1:*:*:*:*:*:*:*"]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7261944","tags":["vendor-advisory","patch"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-305","description":"CWE-305 Authentication Bypass by Primary Weakness","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2026-03-03T20:33:23.734Z"},"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

This issue was addressed under Known Issue DT433340

IBM MQ version 9.1 LTS

Apply cumulative security update 9.1.0.34

IBM MQ version 9.2 LTS

Apply cumulative security update 9.2.0.41 

IBM MQ version 9.3 LTS

Apply cumulative security update 9.3.0.37 

IBM MQ version 9.4 LTS

Apply fixpack 9.4.0.20 

IBM MQ version 9.3 CD and 9.4 CD

Upgrade to IBM MQ version 9.4.5.0 or later continuous delivery release


"}],"value":"This issue was addressed under Known Issue DT433340\n\nIBM MQ version 9.1 LTS\n\n Apply cumulative security update 9.1.0.34 https://www.ibm.com/support/pages/downloading-ibm-mq-91-lts \n\nIBM MQ version 9.2 LTS\n\n Apply cumulative security update 9.2.0.41 https://www.ibm.com/support/pages/downloading-ibm-mq-92-lts   \n\nIBM MQ version 9.3 LTS\n\n Apply cumulative security update 9.3.0.37 https://www.ibm.com/support/pages/downloading-ibm-mq-93-lts   \n\nIBM MQ version 9.4 LTS\n\n Apply fixpack 9.4.0.20 https://www.ibm.com/support/pages/downloading-ibm-mq-94-lts  \n\nIBM MQ version 9.3 CD and 9.4 CD\n\n Upgrade to IBM MQ version 9.4.5.0 https://www.ibm.com/support/pages/downloading-ibm-mq-94-cd  or later continuous delivery release"}],"x_generator":{"engine":"ibm-cvegen"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-03-03T20:49:06.741799Z","id":"CVE-2026-1713","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-03T20:49:10.824Z"}}]}}}