Skip to content
OpenAdvisories
High · 7.5 CVE-2024-40681 EUVD-2024-38569GHSA-pw8x-jjg5-pg2p

IBM MQ security bypass

Published Sep 7, 2024 · Updated Oct 31, 2024 · Assigned by ibm

Description

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.

Affected products

VendorProductAffectedFixed
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD —

Advisories 1

References