CVE-2024-27256: IBM MQ Operator information disclosure
Published Jun 17, 2024
·Updated
IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Other sources
IBM MQ Container uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
— IBM
Affected Software
99 affected components
IBM MQ Container=3.0.0, =3.0.1, >=3.1.0<3.1.3, >=2.0.0<=2.0.22, >=2.4.0<=2.4.8, >=2.3.0<=2.3.3, >=2.2.0<=2.2.2
IBM MQ Operator<=CD: v3.0.0, v3.0.1, v3.1.0 - 3.1.3
LTS: v2.0.0 - 2.0.22
Other Release: v2.4.0 - v2.4.8, v2.3.0 - 2.3.3, v2.2.0 - v2.2.2
IBM supplied MQ Advanced container images<=CD: 9.3.4.0-r1, 9.3.4.1-r1,9.3.5.0-r1,9.3.5.0-r2,9.3.5.1-r1, 9.3.5.1-r2LTS: 9.2.0.1-r1-eus, 9.2.0.2-r1-eus, 9.2.0.2-r2-eus, 9.2.0.4-r1-eus, 9.2.0.5-r1-eus, 9.2.0.5-r2-eus, 9.2.0.5-r3-eus, 9.2.0.6-r1-eus, 9.2.0.6-r2-eus, 9.2.0.6-r3-eus, 9.2.3.0-r1, 9.2.4.0-r1, 9.2.5.0-r1, 9.2.5.0-r2, 9.2.5.0-r3, 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.0.10-r1, 9.3.0.10-r2, 9.3.0.11-r1,9.3.0.11-r2, 9.3.0.15-r1, 9.3.0.16-r1, 9.3.0.16-r2, 9.3.0.17-r1, 9.3.0.17-r2
Other Release: 9.2.0.1-r1-eus, 9.2.0.2-r1-eus, 9.2.0.2-r2-eus, 9.2.0.4-r1-eus, 9.2.0.5-r1-eus, 9.2.0.5-r2-eus, 9.2.0.5-r3-eus, 9.2.0.6-r1-eus, 9.2.0.6-r2-eus, 9.2.0.6-r3-eus, 9.2.3.0-r1, 9.2.4.0-r1, 9.2.5.0-r1, 9.2.5.0-r2, 9.2.5.0-r3, 9.3.0.0-r1, 9.3.0.0-r2, 9.3.0.0-r3, 9.3.0.1-r1, 9.3.0.1-r2, 9.3.0.1-r3, 9.3.0.1-r4, 9.3.0.3-r1, 9.3.0.4-r1, 9.3.0.4-r2, 9.3.0.5-r1, 9.3.0.5-r2, 9.3.0.5-r3, 9.3.0.6-r1, 9.3.1.0-r1, 9.3.1.0-r2, 9.3.1.0-r3, 9.3.1.1-r1, 9.3.2.0-r1, 9.3.2.0-r2, 9.3.2.1-r1, 9.3.2.1-r2, 9.3.3.0-r1, 9.3.3.0-r2, 9.3.3.1-r1, 9.3.3.1-r2, 9.3.3.2-r1, 9.3.3.2-r2, 9.3.3.2-r3, ,9.3.3.3-r1, 9.3.3.3-r2
IBM MQ Operator>=2.0.0<=2.0.22
IBM MQ Operator>=2.2.0<=2.2.2
IBM MQ Operator>=2.3.0<=2.3.3
IBM MQ Operator>=2.4.0<=2.4.8
IBM MQ Operator>=3.1.0<=3.1.3
IBM MQ Operator=3.0.0
IBM MQ Operator=3.0.1
IBM supplied MQ Advanced container images=9.2.0.1-r1-eus
IBM supplied MQ Advanced container images=9.2.0.1-r1-eus
IBM supplied MQ Advanced container images=9.2.0.2-r1-eus
IBM supplied MQ Advanced container images=9.2.0.2-r1-eus
IBM supplied MQ Advanced container images=9.2.0.2-r2-eus
IBM supplied MQ Advanced container images=9.2.0.2-r2-eus
IBM supplied MQ Advanced container images=9.2.0.4-r1-eus
IBM supplied MQ Advanced container images=9.2.0.4-r1-eus
IBM supplied MQ Advanced container images=9.2.0.5-r1-eus
IBM supplied MQ Advanced container images=9.2.0.5-r1-eus
IBM supplied MQ Advanced container images=9.2.0.5-r2-eus
IBM supplied MQ Advanced container images=9.2.0.5-r2-eus
IBM supplied MQ Advanced container images=9.2.0.5-r3-eus
IBM supplied MQ Advanced container images=9.2.0.5-r3-eus
IBM supplied MQ Advanced container images=9.2.0.6-r1-eus
IBM supplied MQ Advanced container images=9.2.0.6-r1-eus
IBM supplied MQ Advanced container images=9.2.0.6-r2-eus
IBM supplied MQ Advanced container images=9.2.0.6-r2-eus
IBM supplied MQ Advanced container images=9.2.0.6-r3-eus
IBM supplied MQ Advanced container images=9.2.0.6-r3-eus
IBM supplied MQ Advanced container images=9.2.3.0-r1
IBM supplied MQ Advanced container images=9.2.4.0-r1
IBM supplied MQ Advanced container images=9.2.4.0-r1
IBM supplied MQ Advanced container images=9.2.5.0-r1
IBM supplied MQ Advanced container images=9.2.5.0-r1
IBM supplied MQ Advanced container images=9.2.5.0-r2
IBM supplied MQ Advanced container images=9.2.5.0-r2
IBM supplied MQ Advanced container images=9.2.5.0-r3
IBM supplied MQ Advanced container images=9.2.5.0-r3
IBM supplied MQ Advanced container images=9.3.0.0-r1
IBM supplied MQ Advanced container images=9.3.0.0-r1
IBM supplied MQ Advanced container images=9.3.0.0-r2
IBM supplied MQ Advanced container images=9.3.0.0-r2
IBM supplied MQ Advanced container images=9.3.0.0-r3
IBM supplied MQ Advanced container images=9.3.0.0-r3
IBM supplied MQ Advanced container images=9.3.0.1-r1
IBM supplied MQ Advanced container images=9.3.0.1-r1
IBM supplied MQ Advanced container images=9.3.0.1-r2
IBM supplied MQ Advanced container images=9.3.0.1-r2
IBM supplied MQ Advanced container images=9.3.0.1-r3
IBM supplied MQ Advanced container images=9.3.0.1-r3
IBM supplied MQ Advanced container images=9.3.0.1-r4
IBM supplied MQ Advanced container images=9.3.0.1-r4
IBM supplied MQ Advanced container images=9.3.0.3-r1
IBM supplied MQ Advanced container images=9.3.0.3-r1
IBM supplied MQ Advanced container images=9.3.0.4-r1
IBM supplied MQ Advanced container images=9.3.0.4-r1
IBM supplied MQ Advanced container images=9.3.0.4-r2
IBM supplied MQ Advanced container images=9.3.0.4-r2
IBM supplied MQ Advanced container images=9.3.0.5-r1
IBM supplied MQ Advanced container images=9.3.0.5-r1
IBM supplied MQ Advanced container images=9.3.0.5-r2
IBM supplied MQ Advanced container images=9.3.0.5-r2
IBM supplied MQ Advanced container images=9.3.0.5-r3
IBM supplied MQ Advanced container images=9.3.0.5-r3
IBM supplied MQ Advanced container images=9.3.0.6-r1
IBM supplied MQ Advanced container images=9.3.0.6-r1
IBM supplied MQ Advanced container images=9.3.0.10-r1
IBM supplied MQ Advanced container images=9.3.0.10-r2
IBM supplied MQ Advanced container images=9.3.0.11-r1
IBM supplied MQ Advanced container images=9.3.0.11-r2
IBM supplied MQ Advanced container images=9.3.0.15-r1
IBM supplied MQ Advanced container images=9.3.0.16-r1
IBM supplied MQ Advanced container images=9.3.0.16-r2
IBM supplied MQ Advanced container images=9.3.0.17-r1
IBM supplied MQ Advanced container images=9.3.0.17-r2
IBM supplied MQ Advanced container images=9.3.1.0-r1
IBM supplied MQ Advanced container images=9.3.1.0-r2
IBM supplied MQ Advanced container images=9.3.1.0-r3
IBM supplied MQ Advanced container images=9.3.1.1-r1
IBM supplied MQ Advanced container images=9.3.2.0-r1
IBM supplied MQ Advanced container images=9.3.2.0-r2
IBM supplied MQ Advanced container images=9.3.2.1-r1
IBM supplied MQ Advanced container images=9.3.2.1-r2
IBM supplied MQ Advanced container images=9.3.3.0-r1
IBM supplied MQ Advanced container images=9.3.3.0-r2
IBM supplied MQ Advanced container images=9.3.3.1-r1
IBM supplied MQ Advanced container images=9.3.3.1-r2
IBM supplied MQ Advanced container images=9.3.3.2-r1
IBM supplied MQ Advanced container images=9.3.3.2-r2
IBM supplied MQ Advanced container images=9.3.3.2-r3
IBM supplied MQ Advanced container images=9.3.3.3-r1
IBM supplied MQ Advanced container images=9.3.3.3-r2
IBM supplied MQ Advanced container images=9.3.4.0-r1
IBM supplied MQ Advanced container images=9.3.4.1-r1
IBM supplied MQ Advanced container images=9.3.5.0-r1
IBM supplied MQ Advanced container images=9.3.5.0-r2
IBM supplied MQ Advanced container images=9.3.5.1-r1
IBM supplied MQ Advanced container images=9.3.5.1-r2
Event History
Jun 17, 2024
CVE Published
via IBM·12:00 AM
Jan 27, 2025
CVE Published
via MITRE·04:27 PM
Data Sourced
via MITRE·04:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Dec 26, 57600
Event
via NVD·05:02 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-27256?
CVE-2024-27256 has been classified with a high severity due to the use of weaker cryptographic algorithms.
2
How do I fix CVE-2024-27256?
To fix CVE-2024-27256, update IBM MQ Container to versions that are not affected, specifically beyond 3.1.3, 2.0.22 LTS, or 2.4.8.
3
Which versions of IBM MQ Container are vulnerable to CVE-2024-27256?
IBM MQ Container versions 3.0.0 to 3.1.3, 2.0.0 to 2.0.22 LTS, and 2.4.0 to 2.4.8 are vulnerable to CVE-2024-27256.
4
What type of information could be compromised by CVE-2024-27256?
CVE-2024-27256 could potentially allow an attacker to decrypt highly sensitive information due to weaker than expected cryptographic algorithms.
5
Is there a workaround for CVE-2024-27256?
While upgrading to the latest version is the recommended approach, evaluate your current security practices to minimize exposure until a patch is applied.