| Package | Affected versions | Patched versions |
|---|---|---|
| mq operator | = 3.0.0= 3.0.1≥ 2.0.0, ≤ 2.0.25≥ 2.2.0, ≤ 2.2.2≥ 2.3.0, ≤ 2.3.3≥ 2.4.0, ≤ 2.4.8≥ 3.1.0, ≤ 3.1.3≥ 3.2.0, ≤ 3.2.3 | |
| supplied mq advanced container images | = 9.2.0.1= 9.2.0.2= 9.2.0.4= 9.2.0.5= 9.2.0.6= 9.2.3.0= 9.2.4.0= 9.2.5.0= 9.3.0.0= 9.3.0.1= 9.3.0.10= 9.3.0.11= 9.3.0.15= 9.3.0.16= 9.3.0.17= 9.3.0.20= 9.3.0.3= 9.3.0.4= 9.3.0.5= 9.3.0.6= 9.3.1.0= 9.3.1.1= 9.3.2.0= 9.3.2.1= 9.3.3.0= 9.3.3.1= 9.3.3.2= 9.3.3.3= 9.3.4.0= 9.3.4.1= 9.3.5.0= 9.3.5.1= 9.4.0.0 |
IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free