CVE-2024-40681

IBM MQ security bypass PUBLISHED

Description (CNA)

IBM MQ 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user in a specifically defined role, to bypass security restrictions and execute actions against the queue manager.

Affected (CNA)

Vendor / product	Versions
IBM / MQ	affected 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, 9.4 CD

CWE

CWE-266

References

https://www.ibm.com/support/pages/node/7167732

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.