Description
IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ Operator | 2.4.0 – ≤ 2.4.8, 2.3.0 – ≤ 2.3.3, 2.2.0 – ≤ 2.2.2, 2.0.0 LTS – ≤ 2.0.22 LTS, 3.0.0 CD, 3.0.1 CD, 3.1.0 CD – ≤ 3.1.3 CD | — |
Advisories 1
- WID-SEC-2025-0198 IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 27, 2025