Ibm

Mq Operator

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2025-33013

  • EPSS 0.02%
  • Veröffentlicht 24.07.2025 14:55:04
  • Zuletzt bearbeitet 22.08.2025 18:10:19

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to impro...

6.5

CVE-2025-36005

  • EPSS 0.03%
  • Veröffentlicht 24.07.2025 14:52:53
  • Zuletzt bearbeitet 22.08.2025 18:08:49

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive informa...

9.8

CVE-2025-36041

  • EPSS 0.01%
  • Veröffentlicht 15.06.2025 12:51:06
  • Zuletzt bearbeitet 22.08.2025 18:33:01

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other...

6

CVE-2025-1333

  • EPSS 0.02%
  • Veröffentlicht 01.05.2025 22:15:16
  • Zuletzt bearbeitet 02.05.2025 13:52:51

IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration...

6.5

CVE-2025-27365

Medienbericht
  • EPSS 0.03%
  • Veröffentlicht 01.05.2025 21:24:24
  • Zuletzt bearbeitet 02.05.2025 13:52:51

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10  Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA chan...

7.5

CVE-2024-27256

  • EPSS 0.03%
  • Veröffentlicht 27.01.2025 17:15:15
  • Zuletzt bearbeitet 18.08.2025 18:17:32

IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly se...

8.8

CVE-2024-40681

  • EPSS 0.13%
  • Veröffentlicht 07.09.2024 15:15:10
  • Zuletzt bearbeitet 15.08.2025 14:21:47

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.

5.5

CVE-2024-40680

  • EPSS 0.02%
  • Veröffentlicht 07.09.2024 14:15:02
  • Zuletzt bearbeitet 31.10.2024 17:15:12

IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.

9.8

CVE-2024-39742

  • EPSS 0.04%
  • Veröffentlicht 08.07.2024 14:15:02
  • Zuletzt bearbeitet 21.11.2024 09:28:19

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.

7.5

CVE-2024-39743

  • EPSS 0.17%
  • Veröffentlicht 08.07.2024 14:15:02
  • Zuletzt bearbeitet 21.11.2024 09:28:20

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memor...