IBM MQ Operator
Moderate fix2 remedies
cpe:2.3:a:ibm:mq_operator:*:*:*:*:*:*:*
Moderate fix2 remedies
- >= 3.2.0, <= 3.2.13
- >= 3.3.0, <= 3.4.1
- >= 3.5.0, <= 3.6.0
- >= 2.0.0, <= 2.0.29
IBM MQ Operator Heap Memory Vulnerability Leading to Sensitive Information Disclosure
Vulnerability
Patched
A vulnerability exists in multiple versions of IBM MQ Operator, including LTS, CD, and SC2 distributions. The issue arises from improper management of heap memory, which can result in the unintentional disclosure of sensitive information to local users.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive information.
Remediation
Users can upgrade to IBM MQ Operator v3.6.1 for CD releases or v3.2.14 for SC2 releases. Details for these versions are available in the IBM Support Security Bulletin.
Added: Jul 24, 2025, 6:09 PM
Updated: Jul 24, 2025, 6:09 PM
Vulnerability Rating
Custom Algorithm
spread
1.2impact
2.5exploitability
4.7remediation
7.7relevance
0.3threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.