Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mq_operator:3.5.3:*:*:*:continuous_delivery:*:*:*

part: a version: 3.5.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMq Operator (bbcf145e-7d64-54a4-86cf-763e02b2d433)
Edition*
Language*
Software editioncontinuous_delivery
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36041 vulnerable 2026-06-08 07:21:00.590022 IBM MQ improper certificate validation
MEDIUM (4.7)
IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the intended key which could disclose sensitive information or allow the attacker to perform unauthorized actions.
Published: 2025-06-15T12:51:06.394Z
Updated: 2025-08-24T11:52:26.288Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.