| Package | Affected versions | Patched versions |
|---|---|---|
| mq operator | = 3.3.0= 3.4.0= 3.4.1= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.6.4= 3.7.0= 3.7.1= 3.7.2= 3.8.0= 3.8.1= 3.9.0= 3.9.1= 3.9.2= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4≥ 2.0.0, ≤ 2.0.29≥ 3.2.0, ≤ 3.2.29 | |
| supplied mq advanced container images | = 10.0.0.0= 10.0.0.5= 9.3.0.0= 9.3.0.1= 9.3.0.10= 9.3.0.11= 9.3.0.15= 9.3.0.16= 9.3.0.17= 9.3.0.20= 9.3.0.21= 9.3.0.25= 9.3.0.3= 9.3.0.4= 9.3.0.5= 9.3.0.6= 9.4.0.0= 9.4.0.10= 9.4.0.11= 9.4.0.12= 9.4.0.15= 9.4.0.16= 9.4.0.17= 9.4.0.20= 9.4.0.21= 9.4.0.25= 9.4.0.26= 9.4.0.5= 9.4.0.6= 9.4.0.7= 9.4.1.0= 9.4.1.1= 9.4.2.0= 9.4.2.1= 9.4.3.0= 9.4.3.1= 9.4.4.0= 9.4.4.1= 9.4.5.0= 9.4.5.1 |
IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes for Java.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free