Lucene search

K

6 matches found

CVE
CVE
added 2024/03/03 12:15 p.m.71 views

CVE-2024-27255

IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 283905.

7.5CVSS5.5AI score0.00031EPSS
CVE
CVE
added 2024/03/03 12:15 p.m.68 views

CVE-2023-47745

IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638.

6.2CVSS5.9AI score0.0001EPSS
CVE
CVE
added 2024/07/08 2:15 p.m.58 views

CVE-2024-39743

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service caused by incorrect memory de-allocation. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 297172.

7.5CVSS5.9AI score0.00225EPSS
CVE
CVE
added 2024/09/07 3:15 p.m.54 views

CVE-2024-40681

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.

8.8CVSS7.4AI score0.00127EPSS
CVE
CVE
added 2024/09/07 2:15 p.m.52 views

CVE-2024-40680

IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation causing a segmentation fault.

5.5CVSS5.2AI score0.00024EPSS
CVE
CVE
added 2024/07/08 2:15 p.m.49 views

CVE-2024-39742

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.

9.8CVSS7.8AI score0.00022EPSS