CVE-2024-27255

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27255
IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 283905.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 Vendor Advisory
https://www.ibm.com/support/pages/node/7126571 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 Vendor Advisory
https://www.ibm.com/support/pages/node/7126571 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*
cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*
cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*
cpe:2.3:a:ibm:mq_operator:2.0.0:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_operator:2.0.18:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_operator:3.0.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.0.1:*:*:*:cd:*:*:*
History

23 Dec 2024, 17:32

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:mq_operator:2.0.18:*:*:*:lts:*:*:*
cpe:2.3:a:ibm:mq_operator:3.0.1:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:3.0.0:*:*:*:cd:*:*:*
cpe:2.3:a:ibm:mq_operator:*:*:*:*:-:*:*:*
cpe:2.3:a:ibm:mq_operator:2.0.0:*:*:*:lts:*:*:*
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7126571 - () https://www.ibm.com/support/pages/node/7126571 - Vendor Advisory
First Time Ibm
Ibm mq Operator

21 Nov 2024, 09:04

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/283905 -
References () https://www.ibm.com/support/pages/node/7126571 - () https://www.ibm.com/support/pages/node/7126571 -
Summary
  • (es) IBM MQ Operador 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 a 2.4.7, 2.3.0 a 2.3.3, 2.2.0 a 2.2.2 y 2.3. 0 a 2.3.3 utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. ID de IBM X-Force: 283905.

03 Mar 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-03 12:15

Updated : 2024-12-23 17:32

NVD link : CVE-2024-27255

Mitre link : CVE-2024-27255

CVE.ORG link : CVE-2024-27255

JSON object : View

Products Affected

ibm

  • mq_operator
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm