title: IBM MQ Container information disclosure
description: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  283905.
problem types: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
affected:
{
defaultStatus: unaffected
product: MQ Operator
vendor: IBM
versions:
lessThanOrEqual: 2.0.18 LTS, status: affected, version: 2.0.0 LTS, versionType: semver
lessThanOrEqual: 2.4.7, status: affected, version: 2.4.0, versionType: semver
lessThanOrEqual: 2.3.3, status: affected, version: 2.3.0, versionType: semver
lessThanOrEqual: 2.2.2, status: affected, version: 2.2.0, versionType: semver
lessThanOrEqual: 3.0.1 CD, status: affected, version: 3.0.0 CD, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL