CVE-2020-4320: IBM Mq

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.

Affected products

• IBM Mq: from 8.0.0.0, before 8.0.0.15 (fixed in 8.0.0.15); from 9.0.0.0, before 9.0.0.10 (fixed in 9.0.0.10); from 9.1.0, before 9.1.5 (fixed in 9.1.5); from 9.1.0.0, before 9.1.0.5 (fixed in 9.1.0.5)

Published 2020-06-16. Last modified 2026-06-17.