8.1
High
CVE-2024-39742 IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain…
Description
IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 could allow a user to bypass authentication under certain configurations due to a partial string comparison vulnerability. IBM X-Force ID: 297169.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MQ Operator | Versions not published | |
| mq_operator | 3.2.2 | No fix stated |
| mq_operator | 2.0.24 | No fix stated |
Other CVEs of MQ Operator
The 27 CVEs of MQ Operator →
CVE-2026-10572
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a…
8.8
High
CVE-2026-10574
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a…
8.8
High
CVE-2026-10743
IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation…
8.8
High
CVE-2026-11828
IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to…
5.9
Medium