CVE-2024-27255
Assigner: ibm
Published: 2024-03-03T11:54:10.301Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: MQ Operator
vendor: IBM
versions: lessThanOrEqual: 2.0.18 LTS
status: affected
version: 2.0.0 LTS
versionType: semver
lessThanOrEqual: 2.4.7
status: affected
version: 2.4.0
versionType: semver
lessThanOrEqual: 2.3.3
status: affected
version: 2.3.0
versionType: semver
lessThanOrEqual: 2.2.2
status: affected
version: 2.2.0
versionType: semver
lessThanOrEqual: 3.0.1 CD
status: affected
version: 3.0.0 CD
versionType: semver
descriptions: supportingMedia: base64: no
type: text/html
value: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  283905.
value: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  283905.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-327
description: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
type: CWE
source: discovery: UNKNOWN
title: IBM MQ Container information disclosure
x_generator: engine: Vulnogram 0.1.0-dev