CVE-2024-27256CWE-327
IBM MQ Operator information disclosure
Medium · published January 27, 2025
What it is
IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00212 · 11.0th percentile
- Weakness
- CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
- Published
- 2025-01-27T16:27Z
EPSS history
Timeline