high7.5
CVE-2024-40681
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions…
Impact
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Mq Operator | from 2.0.0 through 2.0.25 from 2.2.0 through 2.2.2 from 2.3.0 through 2.3.3 from 2.4.0 through 2.4.8 from 3.1.0 through 3.1.3 from 3.2.0 through 3.2.3 |
| Ibm | Supplied Mq Advanced Container Images | Versions 9.2.0.1, 9.2.0.2, 9.2.0.4, 9.2.0.5, 9.2.0.6, 9.2.3.0 |