Lucene search
HistorySep 07, 2024 - 3:15 p.m.
CVE-2024-40681
ibm mq operator
security bypass
authenticated user
queue manager
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
IBM MQ Operator 2.0.26 and 3.2.4 could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.
Related
vulnrichment
vulnrichment
CVE-2024-40681 IBM MQ Operator security bypass
2024-09-07 14:09:19
ibm
ibm
nessus
nessus
cvelist
cvelist
CVE-2024-40681 IBM MQ Operator security bypass
2024-09-07 14:09:19
cve
cve
CVE-2024-40681
2024-09-07 15:15:10
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2024-40681