Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq Operator (bbcf145e-7d64-54a4-86cf-763e02b2d433)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-39743 vulnerable 2026-06-08 06:41:51.495047 IBM MQ Container denial of service
MEDIUM (5.9)
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172.
Published: 2024-07-08T13:14:43.915Z
Updated: 2024-08-02T04:26:16.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39742 vulnerable 2026-06-08 06:41:51.493368 IBM MQ Container authentication bypass
HIGH (8.1)
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.
Published: 2024-07-08T13:16:10.090Z
Updated: 2024-08-02T04:26:15.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27255 vulnerable 2026-06-08 06:31:28.255663 IBM MQ Container information disclosure
MEDIUM (5.9)
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 283905.
Published: 2024-03-03T11:54:10.301Z
Updated: 2024-08-02T00:27:59.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47745 vulnerable 2026-06-08 06:14:25.500914 IBM MQ Container information disclosure
MEDIUM (6.2)
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.
Published: 2024-03-03T11:56:00.503Z
Updated: 2024-08-02T21:16:43.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.