Skip to content
OpenAdvisories
Medium WID-SEC-2025-1642 2 CVEs

IBM MQ: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Jul 24, 2025 · Updated Jul 24, 2025 · de-DE

Vendor: IBM Product: MQ Platform: Windows

Summary

Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um Informationen preiszugeben.

Product

IBM MQ ist eine Message Oriented Middleware von IBM.

Vulnerabilities 2

  • Medium 6.2
    CVE-2025-33013

    IBM MQ Operator information disclosure

    IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clear…

    IBM MQ Operator
  • Medium 5.9
    CVE-2025-36005

    IBM MQ Operator information disclosure

    IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive information from…

    IBM MQ Operator

Revision history

  1. #1

    Initiale Fassung

References