Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2025-1333

IBM MQ Operator information disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM MQ Operator

Default version status: unaffected

  • 2.0.0 LTS to ≤ 2.0.29 LTSaffected
  • 3.0.0, 3.0.1, 3.1.0, 3.1.3, 3.4.0, 3.5.0, 3.5.1 CDaffected
  • 3.2.0 SC2 to ≤ 3.2.10 SC2affected

References