CVE-2024-27256
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2024-27256 is a vulnerability affecting various versions of IBM MQ Container and IBM MQ, including 3.0.0, 3.0.1, 3.1.0 through 3.1.3 CD, 2.0.0 LTS through 2.0.22 LTS, 2.4.0 through 2.4.8, 2.3.0 through 2.3.3, and 2.2.0 through 2.2.2. This issue arises due to the use of weaker than expected cryptographic algorithms, making it possible for attackers to decrypt highly sensitive information. This could potentially lead to data breaches and unauthorized access to confidential data. IBM has released patches to address this vulnerability, and it is recommended that affected organizations install these updates promptly to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.