NetSight
high8.1

CVE-2024-39742

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vu…

Impact

IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.

Affected products

VendorProductAffected versions
IbmMq Operator
from 2.0.0 before 2.0.24
from 2.2.0 through 2.2.2
from 2.3.0 through 2.3.3
from 2.4.0 through 2.4.8
from 3.1.0 through 3.1.3
from 3.2.0 before 3.2.2

Weakness classification

References