CVE-2024-27256

IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@us.ibm.com

Published

2025-01-27

Last modified

2025-02-18

Weaknesses

CWE-327

Affected products

• Mq Operator (Ibm)
• Supplied Mq Advanced Container Images (Ibm)

References

• https://www.ibm.com/support/pages/node/7157667