Ibm

Supplied Mq Advanced Container Images

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2025-33013

  • EPSS 0.02%
  • Veröffentlicht 24.07.2025 14:55:04
  • Zuletzt bearbeitet 22.08.2025 18:10:19

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to impro...

6.5

CVE-2025-36005

  • EPSS 0.03%
  • Veröffentlicht 24.07.2025 14:52:53
  • Zuletzt bearbeitet 22.08.2025 18:08:49

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive informa...

9.8

CVE-2025-36041

  • EPSS 0.01%
  • Veröffentlicht 15.06.2025 12:51:06
  • Zuletzt bearbeitet 22.08.2025 18:33:01

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other...

7.5

CVE-2024-27256

  • EPSS 0.03%
  • Veröffentlicht 27.01.2025 17:15:15
  • Zuletzt bearbeitet 18.08.2025 18:17:32

IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly se...

8.8

CVE-2024-40681

  • EPSS 0.13%
  • Veröffentlicht 07.09.2024 15:15:10
  • Zuletzt bearbeitet 15.08.2025 14:21:47

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.