Description
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | MQ Operator | 2.0.24, 3.2.2 | — |
Advisories 1
- WID-SEC-2024-1543 IBM MQ: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 8, 2024
References
- https://www.ibm.com/support/pages/node/7159714 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/297169 vdb-entry