CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-27256: IBM MQ Operator information disclosure
5.9
CVSS
Description
IBM MQ Container 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS and 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Classification
CVE ID: CVE-2024-27256
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.9
Affected Products
Vendor: IBM
Product: MQ Operator
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-25 (when was this score calculated)