Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq_operator:2.0.18:*:*:*:lts:*:*:*

part: a version: 2.0.18 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq Operator (bbcf145e-7d64-54a4-86cf-763e02b2d433)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27255 vulnerable 2026-06-08 06:31:28.258052 IBM MQ Container information disclosure
MEDIUM (5.9)
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 283905.
Published: 2024-03-03T11:54:10.301Z
Updated: 2024-08-02T00:27:59.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47745 vulnerable 2026-06-08 06:14:25.503739 IBM MQ Container information disclosure
MEDIUM (6.2)
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.
Published: 2024-03-03T11:56:00.503Z
Updated: 2024-08-02T21:16:43.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.