Description
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 283905.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ Operator | 2.0.0 LTS – ≤ 2.0.18 LTS, 2.4.0 – ≤ 2.4.7, 2.3.0 – ≤ 2.3.3, 2.2.0 – ≤ 2.2.2, 3.0.0 CD – ≤ 3.0.1 CD | — |
Advisories 1
- WID-SEC-2024-0521 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024
References
- https://www.ibm.com/support/pages/node/7126571 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 vdb-entry